O

owl-os

OTOTP: TOTP/HOTP 2FA code generator and validator

OLateral: Lateral-movement mapper - SMB/WMI/WinRM/SSH/PtH reachability and checklist

OJSONForge: JSON Query, Transform, Validate and Pretty

OImplant: Implant config builder/analyzer - sleep, kill-date, channels, IOCs

OIKEScan: IKE/IPsec VPN scanner and analyzer (aggressive mode, weak transforms, PSK risk)

OICMPTunnel: ICMP/ICMPv6 covert-channel and tunnel detector (offline; pcap/log)

OHoneyToken: Honeytoken/canary forge - decoy credentials, deployable files + manifest, trigger correlation

OHive: Windows registry hive parser (regf) - key tree, value decode, ATTandCK persistence (offline)

OHandshake: WPA/WPA2 handshake analyzer - 4-way/PMKID detect, hashcat -m 22000 export (offline)

OGPSSpoofChk: GPS/GNSS spoofing detector - offline NMEA/pcap analysis (teleport, C/N0, timing)

OGeoIP: Offline IP geolocation (MaxMind MMDB engine) | scope | rDNS | ASN/BGP

OFileDiff: Text, binary and directory diff with unified patch + apply

OFIDO: FIDO2/WebAuthn inspector and verifier (signatures, attestation, MDS)

OExifX: Metadata reader and scrubber (EXIF, GPS, XMP, PDF, Office)

OExfilSim: Exfiltration channel detector + offline simulator - pcap, Zeek, flows, DNS/ICMP/cloud/chunking

OEPSS: EPSS exploit prioritizer - FIRST EPSS, CISA KEV, CVSS, SLA buckets, exposure, history

OEnvScan: .env / environment secret + misconfig scanner - tokens, git exposure, perms, drift

ODropper: Stager/dropper analyzer - stages, decode, sandbox-evasion markers

OCronGen: Cron Builder/Validator/Explainer

OUACBypass: UAC Bypass Technique Catalog