Niels Hofmans

maclaunch. Manage your macOS startup items.

ransomwhere. A PoC ransomware sample to test out your ransomware response strategy.

enpass-cli. Enpass commandline client

semantic-commit-hook. Git hook that enforces semantic commit messages.

shade. PoC shadow SaaS and insecure credential detection system using a browser extension.

CVE-2025-53770. Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability.

macbac. Manage and automate your macOS snapshots.

security-slacker. Pokes users about outstanding security risks found by Crowdstrike Spotlight or vmware Workspace ONE so they secure their own endpoint.

gorecaptcha. A package for verifying Google reCaptcha v3 responses in Go

Gunther. Easy web frontend for media streaming - Fork me! (NO LONGER MAINTAINED)

dnstwist. A tool to monitor for potential spear phishing domains and send to Slack.

cloudflare-workers-svelte. Example repository for running a sveltejs/sveltekit website on Cloudflare Workers.

muxy. Emulates a HDHomeRun device while streaming from M3U IPTV streams.

LimeRPi2-kodi. Limelight for OpenELEC. (Kodi)

go-intigriti. Go library to interact with the intigriti API.

MISP2Sentinel. A Python integration that fetches Threat Intelligence from MISP and publishes it to Microsoft Sentinel SIEM.

homebrew-hazcod. Homebrew tap for my personal projects.

intigriti-slack-announce. Go bot that publishes new intigriti bug bounty findings to Slack.

restimac.sh. Script to backup on your WiFi network using restic on macOS

totalrecall. A Go SDK and commandline utility to abuse the latest Windows Copilot+ Recall feature.

backwi.sh. Triggers a TimeMachine backup when you're connected to a specific Wireless Network.

gosecurity. Security library for Go, contains multihash-like library or encryption.

one2sen. Go program that exports 1Password security events to Microsoft Sentinel SIEM.

sentinelpurger. Go program that purges Log Analytics/Sentinel table logs based on a custom retention to save cost.

nicky. Scraper for nickelodeon videos.

cspcollector. Collects CSP reports and builds an exemption database.

cscleanup. CrowdStrike host cleanup script to keep your estate tidy.

bpsync. Backup script for F5 BIG-IP systems.

miro2sentinel. Log ingestor that retrieves audit logs from Miro and stores them in Microsoft Sentinel SIEM>

mailcheck. Go

enpass-decryptor. Commandline client for Enpass

tail2sen. Go program that fetches Tailscale audit & network logs to ingest into Microsoft Sentinel SIEM.

intigriti-cicd-plugin. Tool that can block your CI/CD pipeline depending on outstanding intigriti issues.

portdisco. A reconnaissance tool that tries to find active subnetworks as fast as possible.

mispsent. A tool that exports MISP threat intelligence attributes to Microsoft Sentinel SIEM.

euvd-go. Go SDK to access the ENISA EUVD vulnerability database.

aikido-sdk-go. Go SDK for the Aikido public API.

notion2sentinel. Exports Notion organization audit event logs to Microsoft Sentinel SIEM.

personio-absence-notifier. Go project that reports todays abscences from Personio into Slack.

intigriti-webhook. Intigriti bot that publishes new findings to a webhook of your choice.

gherror. Raise Github tickets for your code errors.

PXelec. Automatic updater for OpenELEC machines that perform PXE booting.

lddfix. Script to fix any linked libraries for your executable to make it static.

ghexport. Export GitHub Enterprise users from SCIM to CSV.