Elliott

Weather2Geo. OSINT tool that geolocates screenshots using leaked weather widget data (time, temperature, condition). Uses the same API as the Windows weather widget.

Umami-Proxy. A simple Cloudflare Workers proxy to bypass AdBlockers for Umami Analytics.

PentagonPizza. This project tracks pizza orders around government buildings in the Washington, DC area. Inspired by the legendary pizza tracker stories, this application aims to gather and visualize order data near key locations in the nation's capital.

LockBit-Wallet-Tracker. This repo contains public Bitcoin addresses attributed to the LockBit ransomware group.

ip6-arpa-cookies. Exploring how cookies can be shared globally across the 2.ip6.arpa zone.

DontTrustTitles. POC showing how browser tab titles can trigger game anti-cheat detections by spoofing debugger names via document.title

EmailFinder. A simple CLI tool to fetch email addresses from GitHub commits by username. Inspired by Ravgeet Dhillon's GitHub Email Finder.

elliott-diy.

DuckHunt. Detect suspicious USB HID devices and automated keystrokes in real time. DuckHunt monitors typing patterns and USB connections to block potential keystroke injection attacks like Rubber Ducky payloads. Includes alerts and optional auto-lock.

MC-PingChecker. Checks HTTPS ping to Minecraft and Mojang API servers using asyncio.

CurseForge. Proof-of-concept for a patched WebSocket RCE in the CurseForge launcher

Watchdog. A script that scans GitHub repositories for suspicious terms and checks them against a malware scanner API to help improve detection capabilities.

Python-Math. Python

DesoAppCode. HTML

supershy-rce. Proof of concept for a now-fixed remote code execution vulnerability in the Supershy VPN client. See blog for full details: elliott.diy/blog/supershy

Emailnator-Recon. Bulk Emailnator inbox scanner for tracking automated account registrations

DigitalOcean-Function-Proxy. Simple way to add a bit more security to Digital Ocean Functions.

Dont-Gift-Up. HTML

CryptoChallenge. Archive of the 2025 WHCC CryptoChallenge.

Thehacktrical. HTML

Sorry. HTML

16ByteChallenge. Archive of the WHCC 16ByteChallenge.

Elliott.diy. My personal security blog built with Astro 6, and a heavily customized version of void-astro.