5h4d0wn1k/photo-organizer
Local-first, private-by-default photo & video library. Rust daemon + Flutter desktop with Android pairing; SQLCipher encryption, ChaCha20-Poly1305 vault, OCR & scene search, P2P LAN sync — all on-device.
Building something that whole human timeline remembers.
Repositories
5h4d0wn1k/toxindb
RAG retrieval-time poisoning detector — demand-recency discrimination, canary injection, provenance attestation; fully offline, SARIF+MD reports
5h4d0wn1k/5h4d0wn1k
Tech lead & founder building 198+ open-source security tools, offensive/defensive tooling, and secure full-stack systems. Student of AI/LLM security and wireless hardware.
5h4d0wn1k/protobuf
Protocol Buffers - Google's data interchange format
5h4d0wn1k/cryptocrack
Crypto attacks + credential cracking - hash identify/crack with rules, RSA/AES/DH attacks, cipher auto-decode, XTS-CPA.
5h4d0wn1k/airguard
Wireless defense & monitoring suite - WIDS sensor, deauth/evil-twin/rogue-AP detection, beacon anomaly scan, WPA3 survey.
5h4d0wn1k/h2-ble-tracker
BLE tracker and sniffer - Bluetooth Low Energy advertising scanning and device fingerprinting.
5h4d0wn1k/h3-zigbee-sniffer
Zigbee/Thread IEEE 802.15.4 packet sniffer for ESP32-C6 — frame capture, header decoding, device tracking, channel control and CSV export for IoT research.
5h4d0wn1k/zocketapp
AI task management platform — Next.js 13 (TypeScript) frontend, Go Fiber REST API, JWT auth, WebSocket real-time tasks, OpenAI assistant, PostgreSQL.
5h4d0wn1k/zerotrustmirror
Zero-trust readiness & correlation engine - ZTA pillar scoring with evidence, multichannel correlation.
5h4d0wn1k/xsf
Special function implementations
5h4d0wn1k/x9-mitm-detectors
MITM detection probes — ARP/DNS/HTTP anomalies that reveal interception on a network.
5h4d0wn1k/x8-nids
Detection-only (blue team) network intrusion detection system — rules engine for port-scan, brute-force, C2-beacon, and exfiltration detection with live capture, pcap replay, and deterministic offline simulation.
5h4d0wn1k/x7-kernel-monitor
Linux kernel and system activity monitor for detection research: process/network/file/syscall collectors, MITRE-mapped anomaly flags, optional eBPF backends, offline self-test.
5h4d0wn1k/x6-ml-siem
ML-powered SIEM lite - anomaly-detection correlation over normalized event streams.
5h4d0wn1k/x5-mitm-suite
Lab-only MITM and spoofing suite — ARP spoof, DNS spoof, HTTP credential capture, https-split, passive monitor, guaranteed restore, dry-run by default.
5h4d0wn1k/x3-iot-fuzzer
Deterministic mutation-based protocol fuzzer for embedded IoT protocols — MQTT, CoAP, HTTP, and binary frames — with crash tracking, dedup, and triage reports for authorized security testing.
5h4d0wn1k/x4-hack-toolkit
Hacking toolkit collection - consolidated offensive utilities for labs and education.
5h4d0wn1k/x2-exploit-ladder
Exploit-development ladder — build a locally compiled vulnerable ELF and walk stack-overflow exploitation: De Bruijn patterns, PTRACE crash tracing, offset discovery, ROP gadget scanning, and ret2win PoC proof.
5h4d0wn1k/x12-ctf
CTF challenge kit - pwn/crypto/web/reversing challenge builders and solve helpers.
5h4d0wn1k/x11-honeypot-stack
Honeypot stack - multi-service decoys with session capture and attacker-playbook replay.
5h4d0wn1k/x10-malware-classifier
ML malware classifier - feature-based sample classification with explainability reports.
5h4d0wn1k/x1-binrecon
Binary recon suite - strings, sections, packers and embedded artifacts for RE triage.
5h4d0wn1k/wiair
Wireless offensive framework - byte-exact 802.11/BLE frame crafting/parsing; offline-only, safety-gated.
5h4d0wn1k/webbreach
Web exploitation framework - OWASP Top-10 attack engines, built-in localhost vulnerable targets, AI-guided scan queue.
5h4d0wn1k/webdevservices
Premium web development services — React 18 + TypeScript + Vite, Three.js 3D visuals, SEO groundwork, consultation-booking API.
5h4d0wn1k/web9-cors-scan
CORS misconfiguration scanner - origin validation and preflight-response flaw detection.
5h4d0wn1k/web8-ssti-scan
SSTI scanner — Jinja2/Twig/Mako/ERB/FreeMarker/Velocity/Smarty fingerprinting, math-eval detection, RCE/file-read payloads and multi-target fuzzing.
5h4d0wn1k/web7-xxe-inject
XXE injection toolkit — entity expansion, blind-OOB exfiltration and parser hardening tests.
5h4d0wn1k/web6-http-smuggle
HTTP request-smuggling tester - CL.TE/TE.CL desync payload validation.