The Rundown

I have too many things all on the go at once and I keep telling myself that I'll get to them eventually, but we all know how that goes.

In the works

I'm currently developing a portofilio website The Archive, keeping my uni repos up to date while also doing way too many personal projects so take a dive into what I spend my time doing. Or don't I won't judge.

Nathan Cobbald's Projects

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

http-garden

Differential testing and fuzzing of HTTP servers and proxies

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

oddjobs

Web app I am currently developing

osint-tools

OSINT open-source tools catalog

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.