- cfzt (
zt) — Zero Trust tunnel manager that exposes local services through Cloudflare, manages system daemons and access policies, and handles UDP/QUIC fallback recovery.
- khm — Known Hosts Manager. A zero-dependency CLI tool to audit, diff, and scan SSH
known_hostsusing raw BSD sockets and a partial SSH handshake.
ios-config — Parser and high-level wrapper for Cisco IOS configurations.
netconv-core — Vendor-agnostic IR (intermediate representation) types and traits for network device configuration conversion. Used by ios-config and the netconv renderers.
gai-inspector (
gai) — getaddrinfo inspector: explains how a name turns into an IP (nsswitch, resolv.conf, systemd-resolved, mDNS) and cross-checks it against a direct DNS query, no LD_PRELOAD/eBPF/ptrace.gai-core — Pure parsing + simulation of Linux name-resolution config (nsswitch.conf, resolv.conf, gai.conf, hosts) behind gai-inspector — no I/O, fixture-tested.
gai-probe — Real I/O backing gai-core's simulation: DNS queries, /etc/hosts, systemd-resolved D-Bus, one-shot mDNS probing.
sidecheck — CLI that audits your own HTTP endpoints for remote timing side-channels, using proper statistics (bootstrap confidence intervals, robust jitter estimation) instead of a stopwatch.
sidecheck-core — Statistical core and HTTP sampler behind sidecheck: Crosby-Wallach box-test timing analysis as a standalone library.
pcap-frame-parser — A small, dependency-light Rust parser for network capture files and the frames inside them - no
libpcap/npcaplinkage, nounsafe.Network Forensic Series — A growing collection of browser-based postmortem PCAP analysis tools.
@lighthouse-explorer/light-parser — Parses IALA maritime light characteristic strings into structured ASTs with computed phase sequences.
burnafter — CLI tool and Fullstack application to share secrets that safely burn after being read.