NXTools
Tools and utilities I build to solve real-world problems
Learn More & Explore
Every tool below is tagged with the nxtools topic on GitHub. Browse the source, read technical articles, and explore documentation
Egret
eBPF runtime security for CI/CD pipelines and Linux hosts. Enforces egress allow-lists, monitors process, file, and network activity, and generates policy from an audit-mode run. Ships as a Go CLI and a GitHub Action with SARIF output.
Egret Nest Dashboard
Self-hosted dashboard for Egret runtime-security telemetry. Ingests CI/CD egress and host events, with organizations, RBAC, TOTP, and SSO. Runs as a single static Go binary or a container - bring your own database.
pfSentinel
Automated backup and monitoring tool for pfSense firewalls. Python CLI with SSH and HTTPS support. Backs up configs, ZFS snapshots, RRD data, DHCP leases, packages, and certificates - with retention policies, multi-device management, and self-update. Windows and Linux. Zero telemetry.
pfSense Geo Block
pfSense geo-blocking for 250+ countries with 175k+ IPv4 and 68k+ IPv6 ranges, updated daily via pfBlockerNG. A daily Slack report shows who is hitting you, from where, and flags port scanners.
Windows Privacy Toolkit
A lightweight PowerShell toolkit to audit and harden Windows 10/11 privacy settings, including telemetry and Recall. No bloat. Just scripts that work. Built for privacy-conscious users and IT professionals.
Cloudflare Tunnel SSH Setup
Install cloudflared and configure SSH to connect through a Cloudflare Tunnel using a service token - zero-trust CI/CD access without exposing port 22 to the internet.
Cloudflare WARP Setup
Headless Cloudflare WARP enrollment for GitHub Actions runners. Gives a runner full private-network access through your Zero Trust organization, so jobs can reach internal services without a traditional VPN.
Cloudflare R2 Backup
Upload, verify, list, and prune backups in Cloudflare R2 from GitHub Actions. Composite action plus a reusable workflow, with MySQL, PostgreSQL, MongoDB, and SQLite templates, SSH or Cloudflare Tunnel transport, and Slack/Discord notifications.
Proxmox Slack Monitor
Real-time monitoring and alerting for Proxmox VE clusters with Slack integration. Watches VMs, containers, resource usage, ZFS health, and security events across the whole cluster.
Self-Hosted Ghost Blog
Security-hardened self-hosted Ghost CMS on Docker Compose: nginx reverse proxy, optional Tinybird analytics and ActivityPub, zero-trust Cloudflare Tunnel deploys, Cloudflare R2 backups, and full CI security automation. This is the stack that runs my own blog.
OpenCarIL
Search over Israel's public vehicle open data - license plate, VIN, recalls, and registration records - refreshed daily from data.gov.il. A companion ETL Worker mirrors the CKAN datasets into Cloudflare D1. Free for noncommercial use.
OpenTaxMap
Interactive map of Israeli localities eligible for the periphery income-tax credit (yishuvim mutavim), covering tax years 2016-2026. Built on Leaflet and GovMap data, served from Cloudflare Workers.
EasyConvert
Client-side PDF table to Excel/CSV converter. Vanilla JavaScript, runs entirely in the browser so no file ever leaves your machine. RTL support and installable as a PWA, hosted on Cloudflare Pages.
YT-DLP Studio
Free, open-source desktop app for yt-dlp. Download video and audio in up to 8K with a download queue, playlist support, subtitles, thumbnails, and history. Windows and Linux, built with PySide6.
Shon and Ron Bot
Telegram bot honoring the Israeli comedy duo Shon and Ron (שרון טייכר וערן זרחוביץ') - character database, trivia quiz, and Hebrew content. Kept as a portfolio archive; no longer maintained.