01
Offensive Security
Web security, enumeration, exploitation and adversarial testing.
[TARGET 01]
AIoT & Embedded
• HOVER TO INSPECT
TELEMETRY LOCKED
PLANET // 01
AIoT & Smart Systems
HARDWARE & EMBEDDED EXPLOITATION
- IoT Firmware Extraction & Emulation
- UART / JTAG / SPI Hardware Reverse Engineering
- Edge AI Model Inversion & Adversarial Evasion
- Industrial OT & Modbus Protocol Analysis
TELEMETRY LOCKED
PLANET // 02
Malware & Reverse Engineering
BINARY DISSECTION & EVASION HEURISTICS
- Dynamic Sandbox Execution & Tracing
- PE Header Disassembly & Shellcode Injection
- API Hooking & Anti-Analysis Evasion
- C2 Command Decryption & Rootkit Analysis
[TARGET 02]
Malware Analysis
• HOVER TO INSPECT
[TARGET 03]
Offensive Red Team
• HOVER TO INSPECT
TELEMETRY LOCKED
PLANET // 03
Offensive Security & Red Team
ADVERSARIAL ATTACK SIMULATION
- Web Application Penetration Testing (OWASP)
- Active Directory Exploitation & Kerberoasting
- Linux/Windows Privilege Escalation
- HTB Pro Labs & Competitive CTFs
TELEMETRY LOCKED
PLANET // 04
Defensive Security & Forensics
THREAT HUNTING & EVIDENCE ACQUISITION
- RAM Memory Forensics (Volatility 3)
- Network Packet Triage & PCAP Analysis
- Event Log Triangulation & Artifact Timelining
- SIEM Detection Rule Engineering
[TARGET 04]
Digital Forensics
• HOVER TO INSPECT
NODE ACTIVE // SEC-RESEARCH COMMAND
Cybersecurity Research.
Security Engineering.
Built in the Real World.
Exploring offensive security, web applications, digital forensics, network security, AI security and the engineering behind secure systems.
CYBERSECURITY
•
RESEARCH
•
ENGINEERING
SCROLL TO EXPLORE PLANETS
Research & Engineering Focus
OPERATIONAL DOMAINS
02
Defensive Security
Detection, investigation, network analysis and security monitoring.
03
Security Research
Labs, vulnerability research, AI security and experimental tooling.
More projects, writeups and research will be added here.
CONTINUOUS LAB UPDATES
ESP32-S3 · C++ · IOT SECURITY
Embedded systems programming, hardware security testing, and IoT server infrastructure built from scratch. Covers sensor telemetry, wireless protocol vulnerability analysis, and robust edge computing.
ESP32-S3 ARCH
LAB // 01
ESP32-S3 Hardware & GPIO Control
Low-level microcontroller firmware architecture using C++ and Arduino IDE. Direct register access, PWM lighting, multi-sensor telemetry, and secure boot fundamentals.
WIRELESS & BLE
LAB // 02
BLE & Wi-Fi Protocol Security
Bluetooth Low Energy GATT services, pairing vulnerability audits, Wi-Fi stack configuration, and secure credential handling on constrained embedded devices.
TELEMETRY & C2
LAB // 03
MQTT & Server-Side Telemetry
Pub/Sub broker integration, mutual TLS payload encryption, lightweight backend servers, and industrial protocol anomaly inspection for IoT gateways.
SNORT · SURICATA · WIRESHARK · THREAT HUNTING
Deep-packet triage of active malware infections, C2 communications, exploit payloads, and IDS/IPS rule engineering using real-world capture data.
PCAP TRIAGE
TRACE // 01
Network Packet Forensics & Wireshark
Reconstructing compromised TCP streams, tracking TLS anomalies, extracting malicious HTTP artifacts, and carving shellcode directly from raw PCAP files.
IDS / IPS SIGNATURES
TRACE // 02
Suricata & Snort Detection Rules
Engineering high-fidelity intrusion detection rules, alerting on beaconing behavioral patterns, and validating signatures against adversary infrastructure.
BINARY ANALYSIS
TRACE // 03
Static & Dynamic Malware Triage
Sandbox behavioral execution, API call tracing, PE header analysis, unpacking basic stagers, and documenting IOCs (hashes, domains, IPs, persistence keys).
33+ TARGETS · 4 PLATFORMS
Full operational walkthroughs and penetration testing dossiers across leading practical security platforms. Each target documented with complete attack chains from initial reconnaissance to root/SYSTEM escalation.
33 ARCHIVED
PLATFORM // 01
Hack The Box Machines
Detailed walkthroughs of Linux and Windows targets including Active Directory, kernel exploits, SAML bypasses, web shells, and deserialization RCEs.
ACTIVE REPO
PLATFORM // 02
TryHackMe Rooms & Challenges
Practical security rooms and forensic investigations covering Jump, Conti, TheStickerShop, MasterMinds, Warzone2, web exploitation, and defensive labs.
LOCAL VMS
PLATFORM // 03
VulnHub & HackMyVM Labs
Isolated virtual machine engagements focused on network enumeration, service misconfigurations, customized SUID binaries, and lateral movement.
OFFENSIVE · DEFENSIVE · EMBEDDED
Selected engineering initiatives spanning offensive red-teaming toolkits, custom proof-of-concept exploits, secure communications infrastructure, and threat hunting scripts.
OFFENSIVE TOOLING
ENG // 01
Red Team Enumeration & Exploitation Suite
Automated scripts and custom tooling for Active Directory enumeration, Kerberoasting validation, BloodHound data analysis, and privilege escalation checks across hybrid enterprise environments.
DEFENSIVE TELEMETRY
ENG // 02
SOC Threat Hunting & PCAP Pipeline
Automated parser scripts that extract network artifacts, match known Suricata alerts against Threat Intelligence feeds, and timeline malicious C2 sessions from enterprise packet captures.
SITE1 COSMIC CAM