cursed271

Ransomware behavior testing harness with synthetic record generation, directory encryption, recovery commands, and desktop alerts. Default mode avoids destructive recovery configuration changes but still encrypts files. Live mode can delete shadow copies and stop services. Restrict execution to disposable laboratories.

External domain assessment utility combining subdomain discovery, IP enrichment, web profiling, email configuration checks, typosquatting analysis, and potential takeover indicators. Produce terminal summaries and Excel workbooks for investigation. Findings rely on external services and heuristics and require validation before reporting.

ReconVault is a CursedSec discovery workspace for security tools, capture-the-flag challenges, and professional certifications. Search, filter, compare, and explore curated resources in one focused catalog—without scattered bookmarks, endless search results, or disconnected resource lists.

Network host discovery utility supporting ICMP sweeps, optional Scapy ARP discovery, and UDP DNS probes. Accept addresses, ranges, or subnets; review hostnames and probe metadata in terminal tables; and export JSON inventories. Operating system estimates are heuristic, not authoritative fingerprints.

Local bug bounty management dashboard built with Flask and SQLite. Track programs, findings, reports, and payouts; search records; link findings to reports; and export JSON backups. Revision checks and recovery snapshots protect saved state. Database contents and backups are unencrypted.

ShellForge is a browser-based workspace for selecting, configuring, and reviewing reverse and bind shell text templates in authorized lab environments. It provides 60 templates, listener references, local text generation, and copy or download controls without executing commands.

Asynchronous TCP port scanner with custom ranges, common port selection, audit presets, and full range scanning. Inspect open ports alongside service names and banner responses, then export JSON findings. Uses connection scans rather than stealth SYN scanning or vulnerability detection.

CIS Benchmark PDF extraction utility that builds formatted Excel assessment workbooks. Parse recommendation identifiers, titles, levels, descriptions, audit procedures, and remediation instructions; then track statuses and reviewer notes. Layout dependent extraction requires manual verification and does not assess system compliance.

An educational terminal password manager built with Python, SQLite, AES CBC, and PBKDF2. Manage accounts, encrypt stored passwords, authenticate through a master password workflow, and generate passwords locally. Archived reference software requiring independent security review before handling sensitive production credentials.

Office VBA project protection modification utility for authorized analysis. Locate embedded project binaries in macro enabled archives, replace a DPB record, and save a rewritten document for inspection. Not document decryption; preserve originals and verify compatibility before relying on results.

Cloud perimeter reconnaissance utility covering candidate AWS storage, Microsoft tenant metadata, Azure endpoints, public GitHub repositories, DNS, and other storage providers. Search selected files for potential secrets and export JSON observations. Response codes and pattern matches require validation before reporting.

F5 BIG IP persistence cookie analysis utility. Decode supported IPv4, IPv6, and route domain formats to inspect backend addresses and ports, or craft IPv4 cookie values for authorized testing. Accept raw cookies or collect them from HTTP responses for investigation.

Interactive browser workspace for clickjacking demonstrations and UI redress testing. Frame a target, adjust opacity, position decoy elements, and export an HTML proof of concept. Use authorized targets and verify the resulting interaction; embedding alone does not establish exploitable impact.

Building offensive-security tooling, adversary simulations, and detection-validation research. Exploring Windows internals, browser attack surfaces, API abuse, and defensive blind spots. Sharing practical, evidence-driven work for authorized security testing and purple-team collaboration.