AegisKit is a self-contained ethical-security toolkit and practice range. Scan, audit passwords, analyze logs, and hunt web vulnerabilities — all on your own machine, against targets that ship with it. Nothing on the internet. Nothing you can get in trouble for.
Real, working tools written for learning. Each is small, readable, and safe to run offline.
Understand how scanning works against a safe local target — service discovery, banners, and timing, without touching a real network.
Score password strength by real entropy, spot weak patterns, and identify hash types — all offline, no wordlists phoning home.
Parse auth and access logs to surface brute-force attempts, odd hours, and suspicious IP patterns — the way a defender would.
Hands-on encoding, hashing, and classic ciphers so the fundamentals actually click.
A deliberately-insecure mini web app to attack legally — SQLi, XSS, IDOR and more, with hints and a built-in scoreboard.
Step-by-step exercises and write-ups so you build real skill, not just run commands.
Start free. Upgrade for the full range and workbook.
Set your own price and connect your checkout (Gumroad, Lemon Squeezy, Stripe Payment Link, etc.) by replacing the buttons above.