Preview · new writeups landing continuously. Everything here is browsable now.

Security engineer · Systems builder

I build the systems
that break systems.

Custom operating systems, offensive-security tooling, and autonomous automation — engineered end to end. From kernel to interface.

See the work Get in touch

About

01 / 04

I'm an independent security engineer who ships whole systems — not just scripts. I build the tools I wished existed: a hardened, custom Linux distro; an autonomous pentest platform; and reporting infrastructure for bug-bounty work. Low-level enough to trust, polished enough to ship.

5+
Shipped products & platforms
2
Custom OS builds (amd64 + Pi 5)
∞
Root shells, responsibly obtained

Selected work

02 / 04
001

Umbral · Shadow AI Discovery Coming soon

A blue-team console that hunts unsanctioned AI across your fleet, then triages it and every CVE by real-world exposure — not raw severity.

  • Finds shadow AI across the fleet. 23 usages, 20 unsanctioned, 17 providers — browser extensions, local LLMs, even AI deps committed in repos.
  • Knows what leaks. Flags every tool that trains on your data and scores it P1–P4 by real risk.
  • Triage that reflects exposure. Fuses CVSS, EPSS, CISA KEV and SSVC with asset business context.
  • Audit-ready. Maps each finding to NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10 and the EU AI Act.
Shadow AICVE triageFastAPICompliance
002

ORBITAL · Recon Globe Coming soon

A recon dashboard that renders your external attack surface as a rotating 3D globe — click any host for live intel and a generated pentest playbook.

  • Attack surface as a globe. Every host is a node on a rotating 3D Earth, coloured critical → hardened.
  • Click to act. Select a node to pull host intel and auto-generate a pentest playbook.
  • Reads at a glance. CVE heatmap, traffic arcs, day/night terminator and a time-scrub against a saved baseline.
  • ATT&CK-mapped. Findings map to MITRE ATT&CK with Navigator-layer export.
OSINTWebGLATT&CKRecon
003

YEETUZ-X OS Coming soon

A custom Kali-based operating system for offensive-security work — a live amd64 image plus a Raspberry Pi 5 build. Opinionated defaults, hardened, and mine.

  • A whole OS, not a config. Custom Kali build with a themed GRUB → Plymouth → greeter → desktop.
  • Loadouts, not bloat. Swappable module sets — yx, FORGE, AEGIS, SENSEI — with on-desktop system widgets.
  • Hardened by default. LUKS2 with encrypted swap; sulfur-amber signature look carried end to end.
LinuxKaliLive ISOPi 5
Writeup
004

YEETUZ-X444 · GODMODE Coming soon

An autonomous pentest suite with a GUI — recon, exploitation, and reporting orchestrated from one control surface. Built for authorized engagements, end to end.

  • One control surface. Recon, web, network, exploitation, post-ex and reporting in a single operator console.
  • Scope-gated. Built for authorized work — Scope & Auth guardrails up front.
  • Quick actions + terminal. Port/vuln scans, subdomain enum, web crawl, live output, wordlists and payloads.
  • AI + autonomous modes. Ollama-backed assistant and an autonomous runner, with a CVE/threat-intel feed.
Web appOffensiveAutomationAI
Writeup
005

ReproForge

Security testing for small businesses, plus ReproForge Pro — the findings-reporter tool behind it. A product, not a side project.

SaaSSecurityReporting
Product · live
006

Pentest Methodology Coming soon

A reusable engagement framework mapping PTES, OWASP, and MITRE ATT&CK into a phase-by-phase checklist — so nothing gets skipped under pressure.

  • Nothing skipped under pressure. Phases 0–6, from scope through cleanup, as a living checklist.
  • Three frameworks, one flow. PTES + OWASP Top 10 / API Top 10 + MITRE ATT&CK, mapped together.
  • RoE-aware. Exploitation gated on rules of engagement; “stop before destructive actions” baked in.
  • Reusable. Copy the relevant phases into a per-engagement note and fill in scope.
PTESOWASPATT&CK
Writeup
007

OSINT Toolkit Coming soon

A curated stack of open-source-intelligence tooling — dark-web, mail, and recon workflows wired together for fast, repeatable investigation.

  • Recon, wired together. A curated stack for repeatable investigation across dark-web, mail and image OSINT.
  • Dark-web crawling. TorBot maps .onion services over Tor, classifies pages (NLP) and builds a link graph.
  • People & artifacts. horus for EXIF, reverse-image, username, email and geo pivots.
  • Tor-first. Runs behind a SOCKS proxy; JSON / graph output ready for the report.
OSINTTorRecon
Writeup

Stack & capabilities

03 / 04

Offensive Security

  • Web & network pentest
  • Exploit development
  • OSINT & recon
  • Bug bounty

Systems & OS

  • Custom Linux distros
  • Kali / Debian internals
  • Raspberry Pi builds
  • Shell & automation

Automation & AI

  • Agentic tooling
  • Python pipelines
  • Local LLM deploys
  • Workflow orchestration

Product & Web

  • Full-stack SaaS
  • Interactive front-ends
  • WebGL & motion
  • Ship-it mindset

Contact

04 / 04

Let's build something dangerous — legally.

sebbeboiah@gmail.com GitHub