Projects
Offensive tooling, red-team frameworks, and internal security research systems.
Private projects
Internal frameworks, attack surface tracking, and threat emulation engines.
- 01
xray-asm
Attack surface management: discovers external assets, tracks changes, and flags what needs review.
- 02
gothamcity
Adversary emulation: runs ATT&CK-based campaigns and shows where detection held and where it failed.
- 03
agentmordor
Maps an AI agent’s tools, identities, and data access, and traces paths from untrusted input to action.
- 04
apex
Agent-based engine that automates repetitive vulnerability research and red-team tasks.
- 05
methodology
Knowledge base for offensive work: 22 security domains under one standard for evidence and reporting.
- 06
cronos
Modular wireless assessment platform: dual-adapter passive recon, client/channel telemetry, and controlled Evil Twin validation.
Open-source projects
Security tooling, automated hardening engines, and training benchmarks on GitHub.
- 01
macharden
Dependency-free macOS security audit and hardening tool: 54 controls, drift tracking, and SARIF output.
- 02
ghostlink
Out-of-band C2 and data-exfiltration framework over legitimate platforms, for authorized red-team operations.
- 03
evilcorp-ios
Deliberately vulnerable iOS app for training, mapped to OWASP MASVS v2 and MASWE.
- 04
evilcorp-android
Intentionally vulnerable Android application for mobile security training, with 42 challenges across OWASP MASVS v2 categories.
- 05
driftnet2
Packet capture and credential extraction tool built on eBPF/XDP.
- 06
mcpbait
Red-team framework for AI agents and MCP integrations: tests tool-use boundaries and prompt-injection paths.