.burso
Security research, CTF write-ups and tools I build for the terminal: network scanners, TLS knives, JVM profilers and hardened container images.
Things I ship
nyxr
Blazing fast network scanner. Fast discovery, evidence-backed service identification. One CLI, REST API and web UI.
brew install matusso/tap/nyxrsslknife
The swiss knife for TLS, X.509, PKI and SSH. Inspect, lint, convert, scan and run a private CA. A single static binary, no OpenSSL.
brew install matusso/tap/sslknifeOpenProfiler
Open-source JVM profiler. CPU, allocations, heap dumps, locks and live attach, from a native Rust agent to a flame graph in your browser.
brew install matusso/tap/openprofilerdocker-builds
Multi-arch container images for security tooling. Native amd64 + arm64 builds, signed provenance, Trivy scan on every publish.
docker pull ghcr.io/matusso/wafw00f:latestLicenscope
Never get surprised by an expired licence again. Track licence, entitlement and TLS certificate expiry, alert Slack, Opsgenie or PagerDuty.
git clone https://github.com/matusso/Licenscope.git && cd Licenscopelibssllabs
Cross-platform C++ library for the Qualys SSL Labs API. Trigger scans and pull structured results from your own code.
git clone https://github.com/matusso/libssllabs.git && cd libssllabs