Programming & Scripting for Pentesters
Build Your Own Tools (Project Track)
A portfolio of tools that proves — and sharpens — your skills.
Nothing cements skill like building. Work through these projects in your language of choice; each maps to a real capability and makes a great portfolio/GitHub piece.
- Port scanner — TCP connect + banner grabbing + threading.
- Directory/content scanner — wordlist-based, like gobuster/ffuf.
- Password sprayer — one password across many users, with rate control.
- Subdomain enumerator — passive (crt.sh/APIs) + brute force.
- Custom reverse shell — TCP handler + client, then add encryption.
- Web fuzzer — mutate parameters and detect anomalies.
- Burp Suite extension — automate a repetitive check in your workflow.
- Exploit automation — wrap a manual exploit into a one-command PoC.