shellox

Encrypted reverse shell with multi-session support. Encrypted communications and concurrent connection management with Tokio.

Rust

Fluxo

private active

Decentralized crypto payment platform with multi-chain support — Ethereum, Solana, Polygon. Two custody models for merchants: hosted and self-custody. Think Stripe, but on-chain. Still in development.

FastAPIReactPostgreSQLRedisEthereumSolanaPolygon

Argus

OSINT platform for real-time monitoring of Telegram bots and chats. Multi-bot manager, Redis Pub/Sub + SSE for live streaming, JWT auth, and dockerized deployment.

FastAPIReactPostgreSQLRedis

TgCloud

Full-stack storage platform built on Telegram with a web frontend, JWT authentication, and an encrypted CLI for people who prefer not to use browsers for anything.

FastAPIReactTypeScript

TgRAT

Multi-client Command & Control framework using Telegram as the communication layer. Encrypted communications throughout. Built for security research and to understand how these systems work from the inside out.

Python

SBid POC

disclosure

Found a real vulnerability in a live production system. Documented it, reported it to the maintainers through responsible disclosure, then published the proof of concept. The system has since been patched, as far as I know.

vulnerability researchPoC

Hack The Box

Completed various machines across different difficulty levels. The interesting ones are the ones where the intended path isn't obvious until you've been staring at it long enough that something clicks.

pentestingCTF