GeezerVison

Anansi

Web application penetration testing CLI — discovery, TLS/header/path auditing, tech-stack detection, takeover, exploit-chain analysis.

Nzinga

Open-source intelligence CLI — multi-source collection, correlation, evidence-backed findings, and reports.

TOHA3EE

Network security assessment framework — recon, enumeration, OSINT, MITM, wireless, switch, auth, web, post-exploitation.

Mansa

Authorized wireless security assessment — WLAN discovery, enumeration, MITM-range analysis, deterministic rules, and transparent risk scoring.

Aksum

Static binary analysis platform — hardening checks, disassembly, dataflow, and attack-surface aggregation.

Sekhmet

Baseline-aware fuzzing framework — mutation, crash classification, deduplication, minimization, and coverage feedback.

Kush

Malware sample analysis — hashes, metadata, static posture, strings, network indicators, IOC extraction, and threat classification. Samples are never executed.

Imhotep

Cloud snapshot security assessment — IAM, storage, network, container, secret, and misconfiguration risk on offline snapshots. Live provider collection is refused.

Jabari

Android device security assessment CLI — ADB-based posture analysis, rule-driven findings, and offline reports.

Amanirenas

Mobile app security assessment — offline IPA/profile analysis for metadata, static, configuration, API, and secrets risk. Runtime assessment and live device acquisition are refused honestly.

Shaka

Active Directory security assessment — discovery, enumeration, relationship graphing, posture analysis, and risk scoring.

Sundiata

Identity directory security assessment — discovery, enumeration, authentication & MFA posture, credential exposure, privilege mapping, and identity attack paths. Credentials are redacted and never stored.

Timbuktu

Digital forensics investigation — evidence integrity, artifact, filesystem, memory, timeline, log, and indicator analysis on offline case files.