whitehat-security.com • discord • mario@whitehat-security.com
I build public projects, security tooling, and educational cybersecurity material.
Most of my work lives at the boundary between offense and defense: reverse engineering malware, breaking applications and infrastructure, building detections, automating security workflows, and turning my experience as an attacker into practical defensive engineering.
[ offensive ]
recon nmap · masscan · amass · subfinder · nuclei · ffuf · gobuster · feroxbuster
web burp suite · owasp zap · sqlmap · nikto
internal/ad bloodhound · netexec · impacket · responder · hydra
cracking hashcat · john the ripper
c2/research metasploit · cobalt strike · sliver · gophish
[ reverse / malware / forensics ]
static ida · ghidra · radare2 · pestudio · pe-bear · capa · yara · dnspyex
dynamic x64dbg · flare-vm · remnux · any.run · cuckoo · virustotal
forensics volatility · autopsy · timesketch
[ detection / defense ]
endpoint crowdstrike · sentinelone · carbon black · sysmon · osquery · velociraptor
network wireshark · tcpdump · zeek · suricata · snort
siem fortisiem · microsoft sentinel · elastic · splunk · wazuh
intel / ir sigma · yara · misp · opencti · thehive · cortex
[ cloud / appsec ]
cloud aws · azure · gcp · cloudflare
infra kubernetes · rancher · docker · terraform · ansible
ci/cd github actions · gitlab ci
sast sonarqube · semgrep
sca / sbom trivy · grype · syft · snyk
iac / cspm checkov · kics · tfsec · prowler · scoutsuite · cloudsplaining · steampipe