So i split it into two groups of stuff im working on:
Main Projects:
1. cyberbrain ( https://github.com/voodooEntity/cyberbrain )
It is a golang based architecture to write event/data driven applications. It is based on an in-memory directed graph storage ( i also wrote https://github.com/voodooEntity/gits). The point of the system is that instead of writing code where A calls B calls C calls D .... you define single "actions". Each action has a requirement/dependency in form of a data structure. If a structure is mapped to the graph storage, it will automatically create singular payloads for such action executions. The architecture is multithreaded by default, meaning all "jobs" will be automatically parallel processed without the developer having to care about concurrency. Also, since every "thread/worker" also does "scheduling" new "jobs", the system scales very well with alot of worker.
Why? Well it mainly developed this architecture for the next project im listing.
2. Ishikawa : an automated pentesting/recon tool
Ishikawa does not try to reinvent well established pentesting/recon tools, instead it utilizes and orchestrates them. The tool consists of actions that either do very simple things like resolveIPFromDomain , or actions which utilize existing tools like nmap, wfuzz, etc.. - collects the info in the central graph and at the end you get a full mapping of your target. Compared to existing solutions it does alot less "useless scans" and just fires actions which make sense based of the already gathered data (we found a https port, we use sslscan to check the cert...).
3. Gits (as mentioned above) a graph in memory threadsafe storage. While i don't plan to many changes on it, it has been developed for cyberbrain so if i need any additions ill do them, also planing to reenable async persistence.
Regarding ishikawa: while im still working on this project, it may be that i will shut it down. I had a rather expensive meeting with a lawyer that basically told me that open sourcing it while beeing a citizen of germany would just open up potentially ALOT of trouble. Right know im not sure what the future will bring - i basically spend 10 years developing it starting with gits, than cyberbrain to finally build the tool i was dreaming of. Just to hide it on my disk.
Sideprojects:
1. go-tachicrypt ( https://github.com/voodooEntity/go-tachicrypt )
It started as a fun project/experiment - a very simple CLI tool which allows to encrypt file(s) / directory(ies) into multiple encrypted files so you can split them over multiple storages or send them via multiple channels. Im planing on hardening it a bit more and giving basic support.
2. ghost_trap ( https://github.com/voodooEntity/ghost_trap )
A very small project i recently put out, nothing to serious but kinda funny and maybe usefull to one or another. It provides
- An github action that will inject polymorphic prompt injections to the bottom of your README.md so LLM scrapers may be fend off
- An javascript that will inject polymorphic prompt injections into your html so more sophisticated crawlers like google etc which emulate javascript also may be fend off
While working on alot of other stuff, these are i think the most relevant.