I build offensive security tools, analyze threats, and share practical knowledge that helps defenders and builders strengthen the digital world.
Process Behavior Monitoring SwissKnife
Windows SSDT hook framework that streams syscalls, file I/O, registry mutations, WFP network events, and DLL loads as structured JSONL. 34 hooked syscalls, minifilter for file ops, registry callbacks, 14 WFP ALE callouts, and direct-syscall detection for malware analysis and offensive research.
Golang Version Manager
Cross-platform Go version manager for Windows, macOS, and Linux. Installs and switches multiple Go toolchains side-by-side with shimmed binaries, per-shell/per-directory/global resolution, and zero elevation required. Bootstrap is idempotent and self-healing.
Nuclei Compatible Vulnerability Scanner
Enterprise-grade, Nuclei-compatible vulnerability scanner written in Rust. Async tokio runtime, governor-based rate limiting, SOCKS/TLS support, YAML template execution, DNS resolver via trust-dns, and Tera-rendered reports.
Simple Edge Password Dumper
Proof-of-concept Go tool that extracts and decrypts credentials stored by Microsoft Edge. Reads the Login Data SQLite store, unwraps the AES master key via DPAPI, and prints decrypted entries — strictly for authorized defensive research.
Layer-7 HTTP Proxy for Network Analysis
Single-binary Go HTTP relay for pivoting through a jumpbox into internal networks. Forwards requests to a destination passed via the `relay_url` query parameter, strips hop-by-hop headers, and uses a tuned client with connection pooling and HTTP/1.1 enforcement.
Windows DLL Injection & File-Access Toolkit
Windows process instrumentation toolkit for authorized security research. Hooks 32 Win32/NT APIs via MinHook inline detours to make blocked paths invisible to a target process, enable DLL search-order hijacking from user-writable directories, protect ntdll.dll from tampering, and capture process/network behavior — built for red-team ops and detection engineering.
An indexed research ledger covering post-quantum security, connected systems, malware analysis, and distributed infrastructure.
A capability matrix spanning offensive operations, systems engineering, defensive architecture, and forward-looking cryptography.
CAP-01 / PRIMARY
Readiness
CAP-02 / ACTIVE
Readiness
CAP-03 / HARDENED
Readiness
CAP-04 / RESEARCH
Readiness
A chronological mission log of offensive security, defensive engineering, malware research, and systems development.
Current
Red Team Operator at Cytomate Solutions and Services in Doha, Qatar. Adversary emulation, infrastructure VAPT, exploit development, and building the Psiberus autonomous simulation platform. Co-inventor on USPTO patent 18/530,422.
Completed
Built internal security tooling and hardened critical healthcare infrastructure in Pakistan. Code security audits, API security, and defensive engineering across a regulated environment.
Completed
Analysed real-world malware samples at Chunkworks in the Netherlands — reversing packers, unpacking malware families, and studying evasion techniques. Published IEEE research on post-quantum cryptography.
Deep-dive technical analysis, tool releases, and security research findings.