I build async backend services in Rust and Python and test web applications and infrastructure for security flaws.
- Offensive security: web apps and APIs, Active Directory, Linux.
- Vulnerability focus: business-logic flaws, authentication bypass, injections.
- Backend: async services, database design, containerized deployment.
- Tooling: MCP servers and automation for AI-assisted security testing.
| Project | Description | Stack |
|---|---|---|
| Aether | Self-hosted internet reconnaissance platform: distributed scan agents (masscan, nmap, httpx, nuclei, tlsx, dnsx), passive subdomain discovery, Shodan-style search and scan history over your own data. |   |
| kali-mcp | Kali Linux container exposed to AI agents via MCP, behind a gateway with a network kill-switch: no NET_ADMIN, no NET_RAW, no-new-privileges. |
 |
| PentaCore | Persistent working memory for AI agents over MCP: goals, checklists, findings and entities that survive context resets. One local binary, encrypted SQLite. |  |
| xbot | Telegram bot for selling VPN subscriptions on top of a Remnawave panel: Telegram Stars and CryptoBot payments, many bots served by one process, referrals, vouchers, automatic provisioning through the panel API. |  |
| DBMorph | Streaming ETL for huge CSV / TXT / SQL dumps: encoding and delimiter auto-detection, files larger than RAM, interactive table export. | |
| Area | Tools |
|---|---|
| Languages |  |
| Security |     |
| Data |     |
| Backend and infrastructure |      |
- Bug in one of my tools: open an issue in the repository.
- Security issue: report it privately via Security → Report a vulnerability in the affected repository, not in a public issue.
- Collaboration: start a discussion or mention me in an issue.