Programmer turned Ethical Hacker. I'm interested in cybersecurity and make some tools for it. Mostly coded in Python 🐍, and more recently Rust 🦀
AutoCaptions. A GUI tool that uses OpenAIs Whisper to transcribe text from an audio/video file, into a Premiere Pro sequence to automate the creation of subtitles.
67LiveOverflowMod. A Minecraft hacked-client for the LiveOverflow Server. Contains various hacks for the challenges on the server, and some utilities.
63practical-ctf. Gitbook: A big collection of my notes for Capture The Flag (CTF) challenges or Hacking in general
54nodejs-file-write-rce. NodeJS File Write to RCE on a read-only filesystem using a ROP chain in libuv
44BashRandomCracker. Crack Bash's $RANDOM variable to get the internal seed and predict future values, after only 2-3 samples
24keepass-dump-extractor. Find and collect parts of a Keepass master key to recover it in plain text from a memory dump
23responder. Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters
15discord-meta. Python
15jorianwoltjer.com. Personal blog website with Markdown using an Axum (Rust) backend
13BedrockFinder. Scan a Minecraft seed for specific bedrock formations to find coordinates from screenshots
12ipobf. Obfuscate an IP address for SSRF filter bypasses
12python-reassembler. Re-assemble Python disassembly text to bytecode
9popup-research. Proof of Concepts for "Pressing Buttons with Popups (on Twitch, LinkedIn and more)"
9client-side-monday. Notes for a Dutch collection of presentations I did at EHGN
9SubSolver. CLI tool to Solve Substitution Ciphers using a wordlist
8default. Do tedious things quickly, only asking the minimal arguments. Easily customizable with modules to make your own commands
8axum-mtls-client-authentication. Example of Axum mTLS client certificate authentication
8WSL-Port-Forward. Forward network traffic directed to Windows to your WSL environment. Pretty much a user friendly wrapper for the netsh portproxy
8deobfuscate-preemptive. Automatically deobfuscate JavaScript code 'Protected' with PreEmptive's JSDefender Demo
7bitwarden-pin-bruteforce. Brute force any Bitwarden PIN from storage or in-memory
6mcp-cli. CLI to interact with and list Model Context Protocol (MCP) servers in SSE (Server-Sent Events) transport mode
6shodan-favicon-preimage. Generate a favicon that results in any target hash on Shodan
3jorianwoltjer.com-php. Personal Website with a Markdown to HTML blog, and information about me. All written in PHP
2shellshocklive-proxy. A modable proxy for the ShellShock Live game that implements the Server Listing protocol
2swenc-proxy. Service Worker Encrypted Proxy to bypass SSL-intercepting firewalls in-browser
2z3-scripts. A collection of scripts using the Z3 Theorem Prover to solve puzzles
2minecraft-protocol. An implementation of a few packets in the Minecraft protocol
1ncr-crypto. A Rust crate for the cryptography used in the Minecraft No-Chat-Reports Mod
1Cryptopals. My solution scripts to the Cryptopals challenges (set 1-4). All written in Python
1Scanmap. A port scanner similar to nmap, but with way nicer and colored output. Not meant to scan stealthily, but gets detailed results very fast
1git-authors. Enumerate authors in Git logs of large sets of repositories for OSINT, to find names and emails
1groupchat-bot. A Minecraft bot that acts as a private group chat
1