Featured
NightJARC2
A command-and-control framework built from scratch for lab work: beacons, listeners, SOCKS5 pivoting and payload staging. Transparent by design: every action attributed and logged, evasion opt-in per payload and always recorded.
The Bounty: Contract Hacker
A freelance hacking sim for iPhone. Take bounties from rival factions, route through hijacked devices, and wipe your tracks before a threat hunt works back to you. Three story arcs, each ending in a choice.
CyberOS
A 32-bit operating system built from scratch in NASM, with a three-stage bootloader, windowed desktop, FAT12/FAT32, an RTL8139 driver and a TCP/IP stack. 17,000 lines of AI-built assembly in a 60KB kernel, and I security-audited my own kernel.
AI Pentest Agent
An autonomous recon and enumeration engine that plans, executes, and iterates on scanning tasks with an LLM-driven loop, wrapped in its own web dashboard.
Ember
A personal Debian-based Linux build: a Windows-feeling KDE desktop, iCloud mail and calendars, and a real security toolset, with snapshots around every package change. Installed and running.
More projects
Dino Dash
A jungle stunt-racing browser game: dinosaur cars, loops, lava and erupting volcanoes. Twenty levels, nine dinos, and a robot driver that plays every level to set the star times.
CyberLink
A cyberpunk-styled node-link puzzle game for iOS. Breach nodes against the clock, choose an operator, and work through five distinct mission types.
NmapEnhanced
A Python wrapper around Nmap that turns a single scan into a ready-made playbook: risk scoring, CVE/exploit lookups, and suggested follow-up commands per port.
Email Spoof Check
A live tool that grades any domain's protection against email spoofing (SPF, DKIM and DMARC) from public DNS alone. No scanning, no authorisation, three seconds.
Side Dashboard
An always-on dashboard for a rotated monitor: live ADS-B flight radar, weather, bin days, countdowns and a live ISS feed. Seventeen cards, one dependency.
JARVIS
A fully local, voice-driven AI assistant for macOS: local LLM, local speech-to-text, a wake word, persistent memory, and a plugin system for controlling the Mac.
SOC Lab
A self-hosted, dockerized Security Operations Center: SIEM, IDS, honeypot, and threat-intel platforms wired together to practice detection and response end to end.
APT Pro
An AI penetration testing platform. The agent plans and runs the test itself across 124 local tools, verifies every finding with command output as evidence rather than inferring it from a version banner, diffs each scan against the last, and writes the report.
CDMF
A six-plane continuous detect-and-mitigate loop: intel triggers a probe, a confirmed finding becomes one canonical mitigation rendered per vendor, four assurance gates attack it, including an agent-generated evasion set, and a human decides before anything reaches a control.
Pentest Harnesses
How to build a testing harness on Anthropic’s Claude, with a methodology document generated into fourteen executable skills, scope enforced in code before the model gets control, and a human approving every command it wants to run.
Agent Commerce
A multi-agent AI pipeline that researches, writes, designs, and reviews digital products end to end, from trend research to a finished, sellable listing.