╭────────────────────────────────────────────────────────────────────────────╮
│ user@box:~# whoami --verbose │
│ OS: Linux x86_64 │
│ Core: Rust (Systems, Linux Drivers, eBPF & Low-Level Observability) │
│ Security: Binary Exploitation, Reverse Engineering, CTF, DevSecOps │
│ Track Record: T-Bank Engineering Intensives & Hackathons │
╰────────────────────────────────────────────────────────────────────────────╯
| Project | Architecture & Stack | Key Metrics & Highlights |
|---|---|---|
| ⚡ nullca | Zero-CA eBPF Plaintext TLS, HTTP/2, HTTP/3, WebSocket, gRPC, Redis & SQL InspectorRust • eBPF Uprobes • HTTP/3 RFC 9114 • DNS & DoH • SSE & AI Tokens • JWT Auditor • Postman v2.1.0 • QPACK RFC 9204 • GraphQL AST • BOLA/IDOR Engine • Fuzzer • Web Cockpit • AArch64 / AMD64 |
• Intercepts plaintext TLS memory (SSL_read, SSL_write, GnuTLS, NSS, Go crypto/tls) with zero Root CA• Automated OpenAPI 3.0.3 & Postman Collection v2.1.0 Generators, GraphQL AST Synthesizer, BOLA/IDOR detector, transparent stream decompressor (Brotli RFC 7932 / Gzip / Deflate / RFC 7692 WS) • RFC 9114 HTTP/3 & QUIC varint codec, RFC 1035 / 8484 DNS & DoH wire dissector, RFC 8895 SSE & AI streaming token extractor (OpenAI / Claude / Ollama) • Zero-dependency JWT Cryptographic Auditor & Dictionary Cracker (CVE-2015-9235 alg: none, RFC 2104 HMAC-SHA256 offline cracking, expiration audit)• Wireshark Decryption Secrets Block (DSB, type 0x0000000A) for native zero-config TLS decryption, real 4-tuple TCP socket resolver ( /proc/<pid>/net/tcp), memory-bounded LRU stream reassembler (RFC 7230 §3.3.3 EOF)• Embedded Web Cockpit Daemon ( nullca web), Terminal Cockpit with Vim mode (:) & search (/), real-time Throughput Sparkline, parameter Fuzzing engine (nullca fuzz)• Live network TLS endpoint dissector ( nullca inspect-cert google.com:443), CSR (PKCS#10) & CRL revocation support• nullca run -- <cmd> spawn-tracer, Redis RESP / SQL / SMTP dissectors, side-by-side Myers Diff Engine ([d]), live Request Replayer ([r])• Comprehensive documentation suite in docs/ (Architecture, eBPF Engine, Protocols, CLI Reference, Security Audit) |
| ⚡ r-rgb | High-Performance Linux Driver & Native GUIRust • GTK4 / Libadwaita • Linux hidraw/sysfs |
• Direct hardware offloading to keyboard MCU with 0% background host CPU • ~3.6µs scene synthesis, 50 hardware presets, live audio visualizer • Stress-tested for 20,000 cycles with AddressSanitizer and cargo audit (0 vulns) |
| 🚩 THEM-CTF_2026 | Security Research & Offensive ExploitationPwn • Reversing • Web & Firmware • Crypto |
• 16 comprehensive bilingual (EN/RU) writeups & exploit PoCs • Virtualized Lua VM deobfuscation, stripped Rust reversing, Android APK analysis • Custom x86_64 shellcoding, embedded router injection, PRNG cryptanalysis |
| 🧭 vibecode | Autonomous Agentic Travel EngineRust • Axum • SQLite • SSE • Leaflet |
• Autonomous LLM agent with strict guardrails against prompt injection and off-topic leaks • 18-rule spatial geo-validation engine (V01–V18) preventing route hallucinations • Asynchronous parallel ingestion pipeline from OSM, weather, and Wikipedia |
| 🌊 PPS-submarine | Robotics & Physics SimulatorC# • Unity • UDP Sockets • JSON API |
• 3D Autonomous Underwater Vehicle (AUV) dynamics simulation • Decoupled network model: high-rate telemetry stream (8081) & command API (8080) |
| 🎮 Mindustry Tooling | Game Networking & Custom ShadersJava • JavaScript (Rhino) |
• Scheme-Zize: 512×512 schematics & crash-safe dedicated server RPC • unit-table: Compact real-time battle HUD with zero draw-tick overhead • CanvasForge: Bayer & Floyd–Steinberg dithering pixel-art compiler |
Hands-on experience across low-level kernel tracing, competitive CTF challenges, and application defense:
- Kernel & eBPF Observability:
- Zero-copy kernel tracing via Linux
tracefs, BPF ring buffers, and multi-stream HTTP/2 session multiplexing. - Direct 64-bit ELF parsing (
.dynsym,.symtab,.strtab) and Go runtime.gopclntabsymbol resolution in stripped binaries. - Register-level ABI hooking (System V AMD64 and Go ABIInternal register conventions).
- Zero-copy kernel tracing via Linux
- Binary Exploitation & Reversing:
- Bytecode virtualization & custom VM architecture analysis (
last_dance). - Disassembly of stripped native Rust binaries (
crabbymonty.exe), Windows PE entropy analysis, and ELF checkers. - Shellcoding under memory constraints (
Baby Shellcode). - Android APK decompilation and client-side validation tampering (
Good9).
- Bytecode virtualization & custom VM architecture analysis (
- Web, Firmware & Embedded Security:
- Reverse-engineering proprietary USB HID communication protocols via Wireshark and Linux
ioctl. - Embedded device web interface exploitation: authentication bypass, command injection, and state pollution (
A Cute Magical Router Gateway).
- Reverse-engineering proprietary USB HID communication protocols via Wireshark and Linux
- DevSecOps & Memory Safety:
- Pure memory-safe systems development with zero-overhead abstractions in Rust.
- Integration of automated static analysis, fuzzing, and CI sanitizers.
Languages :: Rust (Primary), C, C#, Java, JavaScript (Node/Rhino), Python, Bash, Lua
Low-Level/OS :: Linux eBPF / Uprobes, sysfs / hidraw ioctl, POSIX Sockets, x86_64 ASM, Memory Models
Backends/Web :: Axum, REST, Server-Sent Events (SSE), SQLite, GTK4, Libadwaita
Protocols :: TLS, HTTP/1.1, HTTP/2 (HPACK), gRPC, Raw TCP/UDP Sockets, PCAP-NG
Security Tool :: Ghidra, IDA Pro, Binary Ninja, GDB (GEF/pwndbg), pwntools, Burp Suite, Wireshark, JADX
DevOps/CI :: Git, GitHub Actions, Docker, Criterion.rs, AddressSanitizer (ASan)
- T-Bank Engineering & Security Bootcamps / Hackathons:
- End-to-end service design, backend microservices architecture, and high-intensity hackathon sprints.
- Implementation of defense-in-depth principles: input sanitization, tokenization, and LLM-agent security guardrails.