John Conwell

secret_handshake. A prototype malware C2 channel using x509 certificates over mTLS

fqdn_parser. fqdn_parser (Fully Qualified Domain Name Parser) is a library for parsing FQDNs into their component parts, as well as providing additional contextual information about TLDs, multi-label domain suffixes such as '.co.uk', and known private multi-label suffixes, such as '.duckdns.org'

coreNlp. Extensions for and tools to work with CoreNlp