I work on tooling for computer security, OS internals, binary analysis, instrumentation, reverse engineering, game security research, and fuzzing.
- Systems security: hypervisors, virtual machine introspection, debuggers
- Binary analysis and instrumentation: runtime inspection and internals, process injection
- Research operations: curated knowledge bases, reproducible environments, automation
- Vulnerability research tooling: fuzzing techniques (snapshot-based, stateful, structure-aware)
Selected public repositories and substantial forks grouped by area. Archived projects are kept visible as research notes or historical experiments rather than active maintenance targets.
| Project | Description | Stack |
|---|---|---|
| xenith | Research-focused hypervisor for Xen-based debugging, virtual machine introspection, and automation. archived | Rust |
| blackpill | Linux rootkit research project combining a Rust kernel module, eBPF XDP/TC networking, and a custom type-2 hypervisor. archived | Rust / eBPF / KVM |
| awesome-anti-virtualization | Curated reference list for anti-virtualization and VM-detection techniques. | Research list |
| libMMU | Rust crate for rebuilding virtual address spaces from memory dumps, inspired by the OS-agnostic MMU reconstruction techniques explored in mmushell. archived | Rust / Nix |
| mmushell | Substantial fork of EURECOM's memory-forensics PoC; added module packaging, a Nix development shell, MkDocs documentation, and architecture/exporter cleanup. archived | Python |
| pyDFIRRam | Volatility 3-based Python library for scripted and notebook-driven memory-forensics workflows | Python / Volatility 3 |
| secmalloc | Secure allocator experiment around malloc/realloc/free-style semantics. archived | C |
| Project | Description | Stack |
|---|---|---|
| snapchange | Fork of awslabs' KVM snapshot fuzzer with dependency updates, container and template fixes, LD_PRELOAD support, fuzzer virtual-memory mapping, clearer VM-exit diagnostics, and snapshell tooling. archived | Rust / Python / KVM |
| Project | Description | Stack |
|---|---|---|
| mono-injector | Rust CLI and GUI for injecting managed assemblies into Unity and other Mono-hosted Windows processes. | Rust |
| mono-rt | Dynamic Rust bindings to the Mono runtime for injected tooling and runtime inspection. | Rust |
| strafthack | Managed Unity mod for STRAFTAT private-session testing and controlled client-side experimentation. | C# |
| Pity | Legacy Garry's Mod scripting project kept as an archive. archived | Lua |