Cybersecurity tools and services built for everyone.
Sipar Security develops open-source security tools, provides professional security services, and conducts applied security research — built for real-world use, not enterprise budgets.
All tools are free, open-source, and available on GitHub. Pro versions are available directly for advanced features.
Tool 01 · Network SecurityActive
Sipar Network Monitor
A Python-based network intrusion detection system. Detects every device, tracks online/offline status, flags ARP spoofing, port scans, rogue devices, and scores threats in real time.
A web reconnaissance framework built for bug bounty hunters and penetration testers. Automates subdomain enumeration, DNS recon, technology fingerprinting, and port scanning into a single command — now fully open source with improved detection accuracy.
A subdomain takeover detection tool for penetration testers and bug bounty hunters. Enumerates subdomains, follows full CNAME chains, and fingerprints HTTP responses against known vulnerable services.
Ingests output from Amass, httpx, nmap, and ShadowMap and renders an interactive attack surface graph as a single self-contained HTML file. No server, no setup, just open it in a browser.
A source map based endpoint recovery tool. Crawls a target, extracts and resolves JavaScript source maps, and surfaces hidden API endpoints, including sensitive routes that would otherwise stay buried in bundled code.
A free security scanner built for nonprofits and small teams with no dedicated security staff. Checks for exposed legacy admin panels, outdated CMS versions, exposed API keys in JavaScript, missing security headers, and subdomain takeover risk, then generates one plain-language HTML report with an overall risk rating.
A GraphQL security fuzzer for bug bounty hunters and penetration testers. Maps a target's full schema via introspection, tests for batching and alias based rate limit bypass, fuzzes query depth for resource exhaustion, and checks field level authorization for broken access control.
Cybersecurity researcher and penetration tester focused on network security, wireless security, vulnerability assessment, and open-source security tool development. Works with Linux environments, particularly Kali Linux, applying structured methodologies for security testing and defensive assessments. Actively contributes to the cybersecurity community through vulnerability disclosure, open-source development, and academic research. Currently studying at Islamia College Peshawar.
Published Research · 2026
Simulating and Mitigating Rogue Access Point Attacks in Wi-Fi Networks Using Open-Source Tools
Journal of Soft Computing and Artificial Intelligence
Answers to what people ask most often about our tools and services.
Are your tools really free?
Yes — completely free. All tools are open-source and published on GitHub under the MIT License. You can download, use, and modify them at no cost. A Pro version with advanced features is available separately for GhostClaim.
What is subdomain takeover and why does GhostClaim matter?
Subdomain takeover happens when a subdomain points to an external service (like GitHub Pages or Heroku) that has been deleted or abandoned. An attacker can claim that service and take control of the subdomain. GhostClaim automates the detection of this vulnerability across all subdomains of a target domain.
Can I use the Network Monitor on my home WiFi?
Yes. The Network Monitor is specifically designed for home users, IT administrators, and small businesses. You can run it on Linux (including Kali), Windows 10/11 with Npcap, or Android via Termux if rooted. The dashboard is viewable from any browser on the same network.
Is ShadowMap fully free now?
Yes. ShadowMap was previously split into Free and Pro editions. It's now a single fully open-source release with all features included — subdomain enumeration, DNS recon, technology fingerprinting, and port scanning — along with improved detection accuracy and fewer false positives.
What does Sipar Visualizer do?
Sipar Visualizer takes the raw output from Amass, httpx, nmap, and ShadowMap and turns it into a single interactive attack surface graph, delivered as one self-contained HTML file. No install, no server, just open it in a browser. It is currently pre-alpha.
What does EchoRoute do?
EchoRoute discovers hidden API endpoints by decoding JavaScript source maps. It crawls a target, extracts and resolves source maps, and surfaces routes that were never meant to be publicly visible, flagging sensitive ones like account deletion endpoints automatically. It is currently version 0.1.
What does OpenGuard do?
OpenGuard is a free security scanner built for nonprofits and small teams without dedicated security staff. It checks a domain for exposed legacy admin panels (like phpMyAdmin or cPanel), outdated CMS versions, exposed API keys in JavaScript, missing security headers, and subdomain takeover risk, then generates a single plain-language HTML report with an overall risk rating. It is currently version 3.1.
What is the difference between Free and Pro versions?
ShadowMap is now fully open source with no Pro split. For GhostClaim, the Free version covers core detection with 10 service fingerprints, while GhostClaim Pro adds 30+ service fingerprints, stealth modes, JSON export, and HTML/PDF report generation.
How do I get a Pro version?
Reach out to us via the contact options on our Services page. We send you the files directly — no payment platform, no license key, no internet activation required.
How do I report a bug or suggest a feature?
Open an issue on the relevant GitHub repository. We actively read and respond to issues.
Ready to get started?
Get our tools free on GitHub, order a fixed price report, or message us directly.