Portfolio
Projects that ship.
Six production-grade tools spanning AI red-teaming, offensive-security benchmarking, and hardened systems software.
01 / SUIJIN
Python · LangGraph
Suijin
Dual-Mode Autonomous Security — Attack and Defend with AI
A security OS in your terminal. The AI Red Team chains recon to exploitation over a LangGraph state machine while the Blue Team SOC detects live attacks and fights back with tarpits, network blocks, and source patches. One toolkit, one knowledge graph, one offline knowledge base.
262 agent tools
123+ tool packs
8 labs
500+ tests
LangGraph
LLM agents
Red & Blue
Offline KB
Modular OS
Battle mode
02 / BREACHBENCH
Python · Docker
BreachBench
Execution. Not Theory.
A production-grade benchmark that measures whether an LLM can actually execute the full kill chain against live targets — not recite CVEs. Four stages, five vulnerable labs, real tools, real flags.
836 questions
29 topics
5 labs
84 vulns
LLM benchmark
MITRE ATT&CK
Live exploitation
11 providers
Dashboard
03 / DD-RS
Rust · C
dd-rs
Never accidentally destroy a disk again.
A memory-safe reimplementation of Unix dd with a 5-layer safety system, zero-copy kernel transfers, and both legacy key=value syntax plus modern subcommands. Fast, auditable, and safe by default.
13+ risk factors
16 conversions
1.5–3× faster
128 KiB auto block
Rust
Safety guardrails
copy_file_range
GNU-dd compatible
04 / MACVAULT
Shell · AES-256
MacVault
AES-256 at every layer. Zero trace when locked.
A portable encrypted file store for macOS and Linux with dual-layer AES-256 encryption, multi-vault support, and a disguise mode. When locked, nothing remains — no plaintext, no metadata, no trace.
2× AES-256 layers
58 commits
v1.0.19 stable
0 traces when locked
AES-256
APFS / LUKS
Keychain
Audit log
Plugins
05 / CRONTASTIC
C · Cron
crontastic
Write a human-readable sentence and the cron will still work.
A drop-in replacement for Vixie Cron that understands plain English. Over 250 natural-language patterns map to classic cron expressions while preserving every operator, special string, and edge case.
250+ NL patterns
7 operators
8 special strings
--explain mode
Natural language
Vixie superset
Daemon mode
Safety checks
06 / EVILMAID
Shell · macOS
macos-evilmaid
A lifesaving tool for people locked out of Macs they own.
Documents a physical-access attack chain on macOS — and the mitigations that stop it. A LaunchDaemon masquerading as an Apple service persists root access across reboots, with full detection guidance for blue teams.
1 reverse shell
:5500 listener
2 documented paths
0 admin password needed
Recovery Mode
LaunchDaemon
Persistence
Mitigations
