I'm Amped / @AmpedWasTaken. I build security tooling, pull apart unusual web behavior, and turn findings into reproducible evidence instead of scanner noise.
wcdscan is a focused Web Cache Deception scanner. It compares authenticated and anonymous responses, repeats requests to confirm shared-cache behavior, and stores evidence without dumping sensitive response bodies.
$ wcdscan --authorized --url /account baseline auth 200 f64bb92d0e2a anon 302 9ae81ad7b11c variant /account/wcd-lab.css cache HIT age 13 match true result HIGH / SUSPICIOUS evidence confirmed
Subdomain reconnaissance with service detection, JSON export, and takeover checks built for repeatable workflows.
Security middleware for request validation, headers, rate limiting, logging, and common web protections.
SSH and FTP honeypot with a simulated Linux environment and structured activity capture.
I care more about whether somebody else can reproduce a result than whether the finding sounds dramatic. The workflow here is built around permission, evidence, vendor coordination, retesting, and sanitized publication.