Security & OSINT tooling · Desktop · Web · CLI · Arabic-first
Hey, I'm Mohammed, a developer from Iraq.
Most of what I do is security and OSINT tooling, plus the occasional desktop or web app for local businesses. I lean towards small, readable code with as few dependencies as I can get away with, and Arabic-first (RTL) interfaces. Almost everything here started because I needed it for something real, or just wanted to understand how a thing worked from the inside.
| Project | What it does | Stack |
|---|---|---|
| tijarati | Point-of-sale, inventory and sales management for small shops | Python, SQLite |
| wasif | Arabic product-description generator backed by an LLM | Next.js, Claude API |
| menyu | QR menu for restaurants and cafes | Next.js, Tailwind |
| jwt-lens | In-browser JWT decoder and HMAC verifier | Next.js, Web Crypto |
| Project | What it does |
|---|---|
| proxyscope | Intercepting HTTP/HTTPS proxy with a web UI: history, TLS MITM, request inspector, repeater, intercept queue |
| vulnscope | Web scanner: crawler plus header/TLS/CORS/exposure/injection checks with scored HTML reports |
| tlsaudit | TLS configuration and certificate auditor |
| secheaders | HTTP security-header and TLS grader |
| secretscan | Finds hardcoded secrets in a directory tree |
| passforge | Password generator and strength auditor (HIBP) |
| intguard | SHA-256 file integrity monitor |
| Project | What it does |
|---|---|
| certspot | Subdomain enumeration via Certificate Transparency |
| dnsprobe | DNS recon over DNS-over-HTTPS with subdomain probing |
| domaintel | Domain registration lookup over RDAP |
| ipintel | IP geolocation, ASN and reverse DNS |
| webprint | Website technology fingerprinter |
| userfind | Username checker across public platforms |
The security and OSINT ones are dependency-free Python CLIs. They query public data sources or audit targets you're authorized to assess, nothing more.
Reported and fixed a scan-evasion bug in DataDog's guarddog (malware scanner for PyPI/npm) where a crafted ZIP reads as empty but still unpacks code on install.