https://naved124.github.io/tags/tools/Recent content in tools on naved // security notesHugoen-USWed, 04 Nov 2026 00:00:00 +0000https://naved124.github.io/notes/reconforge-v0-3/Wed, 04 Nov 2026 00:00:00 +0000https://naved124.github.io/notes/reconforge-v0-3/Replacing a keyword CVE search with CPE matching, local version checks and a confidence level on every result. Most of the work turned out to be NVD&rsquo;s data, not the API.https://naved124.github.io/notes/building-reconforge/Fri, 30 Oct 2026 00:00:00 +0000https://naved124.github.io/notes/building-reconforge/<h2 id="the-idea-in-one-paragraph">The idea in one paragraph</h2> <p>Every box and every engagement starts the same way: scan, read the Nmap output, google each service version for CVEs, check whether Metasploit has a module, then write it all down. <a href="https://github.com/Naved124/reconforge">reconforge</a> automates that first hour. It takes a target, refuses to touch it unless it&rsquo;s in an authorized scope file, runs Nmap, and turns the output into a Markdown report: misconfigurations first, candidate CVEs second, Metasploit modules third, next steps at the end. It doesn&rsquo;t exploit anything. It hands a human a prioritised list to verify.</p>