Assembly Details / Shipped Tooling

A WordPress PHP plugin that logs and visualises brute-force login attempts at scale, paired with Python services that turn raw logs into real-time intelligence.

Telegram-bot alerting collapsed manual monitoring by 50%. Third-party IP-reputation APIs and geolocation enrichment cut investigation time by 40%, analysts know the origin and historical reputation of an attacker before they finish reading the alert.

A Python framework that automates web vulnerability discovery, starting with XSS. Web scrapers, spiders, and form parsers identify injection points across target URLs; the engine crawls, injects payloads, and analyses responses end-to-end.

Used in my own disclosure workflow, particularly for reporting issues to organisations that don't run formal bug bounty or security-reporting programmes. The point: lower the friction of doing the right thing.

Not an artefact. a practice. Targeted reconnaissance, exploit validation, and coordinated disclosure across web applications globally. Every finding ships with a written reproduction path and a remediation suggestion.

The work behind the Hall-of-Fame credits from Sony, Nintendo, Autodesk, and Michelin, and the published CVE-2023-37737.