[subject_003] // Custom Scripts & Hacking Hardware

Hands-on Projects.

A showcase of automated reconnaissance scripts, hardware research modules, and vulnerability sandbox lab builds.

[001] / repositories

ReconScanner Python

Multi-threaded TCP port scanner & service fingerprinting. Automates banner grabbing and web directory enumeration.

Reconnaissance Sockets Automation

NFCEmulator C++

Hardware verification with ESP32, Arduino & PN532. Parses tag responses, extracts UID metadata, emulates HF/LF tags.

Arduino ESP32 Hardware

SecLab Docker

Lightweight pentest lab deployable in one command. Docker-based exploit testing and CTF setup checks.

Docker Vulnerability Bash

Python · Reconnaissance

ReconScanner

Python

Reconnaissance Sockets Automation

A multi-threaded TCP port scanner and service fingerprinting tool that automates banner grabbing and web directory enumeration.

What it does

ReconScanner performs fast SYN scans using customizable thread pools, trading raw speed for configurability depending on the target's size and sensitivity.

Once a port responds, it extracts the service banner and hands off to a lightweight HTTP directory buster, so reconnaissance and enumeration happen in a single pass instead of two separate tool runs.

Key features

JSON output for easy piping into other tools
Real-time progress reporting during long scans
A CVE lookup placeholder for future integration with vulnerability databases

It's been used in internal pentests as a first-pass recon step before deeper manual testing begins.

C++ · Hardware

NFCEmulator

C++

Arduino ESP32 Hardware

Hardware verification work built on ESP32, Arduino, and the PN532 module — parsing tag responses, extracting UID metadata, and emulating HF/LF tags.

What it does

NFCEmulator emulates MIFARE Classic and low-frequency tags, with firmware design inspired by the Proxmark3 project.

The goal was a cheap, reproducible setup for testing how access-control hardware reacts to cloned or malformed tag data, without needing a commercial-grade rig.

Use cases

Physical security audits of badge and access systems
Cloning research for understanding tag vulnerabilities
IoT protocol fuzzing against NFC/RFID readers

Docker · Vulnerability Lab

SecLab

Docker

Docker Vulnerability Bash

A lightweight pentest lab that deploys in a single command — Docker-based exploit testing and CTF setup checks, ready in minutes.

What it does

SecLab bundles intentionally vulnerable services like DVWA and Juice Shop together with attacker tooling, so a full practice environment spins up without manually wiring containers together each time.

Included

Isolated networks per scenario, so labs don't interfere with each other
Automated scoring scripts for tracking progress through challenges
Customizable scenarios for red team / blue team practice

It's primarily meant as a fast way to reset to a clean state between practice sessions, rather than a long-running production-style lab.