offensive security · capability development

Capability development for operators who can't afford to guess.

Breaking things professionally since 2012. Building the platforms that make authorized offensive work repeatable, sovereign, and quiet.

Since 2012 in offensive security
Since 2018 in senior roles
IoT to nation-scale assessment surface
CVE-2023-33105 Qualcomm WLAN research

Operating principles

Sovereign infrastructure Operator-owned stack, mail, models, telemetry, and deployment surface.
Governed offensive work Scope, Rules of Engagement, audit trails, and teardown are part of the system.
Evidence survives scrutiny Integrity hashes, structured exports, reproducible pipelines, and case-aware reporting.
Local-first by default Target data, forensic material, and model outputs stay inside the operator environment.

~/selected-work

Poseidon-X

active

Sovereign campaign simulation infrastructure for authorized red teams - multi-host deployment, operator-owned mail, audit trails, and no vendor telemetry.

goreactred teamsocial engineering

Luc1

pre-release

Local autonomous red-team operations - specialist lanes, shared memory, governed scope, and operator-owned tools.

ai agentsred teamlocal-firstlanggraph

OPSINT

active

Mobile red-team operations for authorized Android assessments - stock-device collection, encrypted operator channels, dashboard, and evidence export.

androidrustred teammobile operations

RADAR-X

pre-release

Distributed network intelligence at national scale - regional worker pairs, VPN-isolated egress, MQTT orchestration, and Postgres-backed results.

rustreactreconmqtt

Mammon

active

Local forensic evidence analysis - multilingual audio, vision, entity correlation, identity clusters, and hybrid search.

pythonforensicsllmlancedb

ARCHON

in development

Android forensics built like a product - selective extraction, native Rust UI, relationship graphs, reports, and SHA-256 integrity.

rustforensicsandroidegui

rcap-ng

active

Visibility from inside the router - remote libpcap for embedded Linux, Zeek alerts, Prometheus metrics, and replayable captures.

cpythonzeekembedded

CVE-2023-33105

published

Published Qualcomm WLAN research: transient denial-of-service in WLAN host/firmware triggered by malformed authentication-frame behavior.

cvewirelessqualcommpython