All Projects (2)

Projects Archive

Click any project card to open details in a modal.

async

Featured

Scans a machine for forensic evidence of cheating in FiveM and gives a verdict based on what it finds.

Security ToolingView→

Web Scanner

Open Source

A native macOS app that scans a website for security weaknesses and exposed secrets, and explains how to fix what it finds.

Security ToolingView→

Web Scanner

Security Tooling • 2026

65+

Secret Patterns

Scan Modes

MIT

License

Overview

A native macOS app written in Swift and SwiftUI that scans a website for security weaknesses, exposed secrets and hidden content, and explains what each finding means and how to fix it. All networking runs client-side through URLSession and every analysis happens locally on the machine, so nothing gets uploaded. The active probes use benign markers rather than working payloads and never send a state-changing request, and the tool is intended for domains you own or have written permission to test.

Technologies

SwiftSwiftUImacOSURLSession

Key Features

✓Deep secret scan across 65+ credential patterns in HTML, JS, CSS, config files and source maps
✓Exposed-file hunt for .env, .git/config, backups and SQL dumps, including blocked files recovered through side doors
✓Wordlist-driven content discovery with recursion, extension fuzzing and open-directory detection
✓Safe active probes for open redirect, reflected XSS, CRLF and host-header injection, using benign markers only
✓Subdomain enumeration with dangling-service takeover fingerprints
✓Findings rated Critical to Info and exportable as Markdown or JSON

GitHub