Skip to content
View zzzteph's full-sized avatar
😾
😾
239 followers · 2 following

Achievements

Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: Starstruckx3Achievement: YOLO

Achievements

Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: Starstruckx3Achievement: YOLO

Block or report zzzteph

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
zzzteph/README.md

Hi there 👋

My name is Ivan, or Steph. I do security trainings, researches, and, occasionally, some bug-hunting, pentests, and other security stuff. On top of that buildding tools for recon, cracking, and web testing, then open-source them. Spoke at many conferences including BlackHat US/Europe, Hacktivity, GreHack, CONFidence, One-Conference, and others.

Find me: @w34kp455

Currently building

  • boxcutter - every web-testing tool in one container, one CLI, one JSON output. subfinder, httpx, nuclei, ZAP, sqlmap and more, plus LLM agents that drive them.
  • lockpick.fun - a browser lockpicking simulator with real pin mechanics: binding order, security pins, false sets.
  • crack-js - hashcat-format hash cracking in pure JavaScript. Powers the cracking on weakpass.com.
  • low-hanging-vulns - live monitoring of critical and high web bugs

Pinned Loading

  1. weakpass weakpass Public

    Weakpass collection of tools for bruteforce and hashcracking

    Vue 726 69

  2. Dutch_Gov_Scope Dutch_Gov_Scope Public

    Dutch Government Bugbounty scope, subdomains and endpoints

    Python 40 6

  3. low-hanging-vulns low-hanging-vulns Public

    Critical and High web vulnerabilities monitoring

    Python 8 3

  4. appsec.study appsec.study Public

    List of vulnerable machines for testing and training. Nothing more. Nothing less.

    JavaScript 9 2

  5. boxcutter boxcutter Public

    All-in-one container with preconfigured tools and workflows for web scanning, pentest and bug bounty.

    Python 2

  6. lockpick.fun lockpick.fun Public

    Realistic lockpicking simulator - pin mechanics, security pins and false sets, shown in cutaway.

    TypeScript 2 2