whitehat-security.com • discord • [email protected]
I build public projects, security tooling, and educational cybersecurity material.
Most of my work lives at the boundary between offense and defense: reverse engineering malware, breaking applications and infrastructure, building detections, automating security workflows, and turning my experience as an attacker into practical defensive engineering.
[ offensive ] recon nmap · masscan · amass · subfinder · nuclei · ffuf · gobuster · feroxbuster web burp suite · owasp zap · sqlmap · nikto internal/ad bloodhound · netexec · impacket · responder · hydra cracking hashcat · john the ripper c2/research metasploit · cobalt strike · sliver · gophish [ reverse / malware / forensics ] static ida · ghidra · radare2 · pestudio · pe-bear · capa · yara · dnspyex dynamic x64dbg · flare-vm · remnux · any.run · cuckoo · virustotal forensics volatility · autopsy · timesketch [ detection / defense ] endpoint crowdstrike · sentinelone · carbon black · sysmon · osquery · velociraptor network wireshark · tcpdump · zeek · suricata · snort siem fortisiem · microsoft sentinel · elastic · splunk · wazuh intel / ir sigma · yara · misp · opencti · thehive · cortex [ cloud / appsec ] cloud aws · azure · gcp · cloudflare infra kubernetes · rancher · docker · terraform · ansible ci/cd github actions · gitlab ci sast sonarqube · semgrep sca / sbom trivy · grype · syft · snyk iac / cspm checkov · kics · tfsec · prowler · scoutsuite · cloudsplaining · steampipe