作品

Local QEMU VMs on Linux from a TUI and a CLI. No libvirt, no daemon, one binary.

Crowdsourced privacy infrastructure against mass surveillance: at-cost RF / WiFi-sensing hardware plus a P2P threat-intel network. Offense is shipping; defense is empty.

A leaderless mesh of self-replicating earning agents under an immutable core. The spend cap holds by arithmetic, not by good intentions.

Epistemic memory for AI agents: claims, evidence, and provenance as a first-class graph. Before intelligence can be trusted, it has to learn to doubt.

Your agent forgets. This one doesn't. Persistent, sourced memory for AI agents, shipped as a drop-in npm package.

The schema library behind Engrammic: the types and rules that turn an agent's observations into claims, facts, and beliefs.

A Claude Code plugin that strips the AI out of AI-written prose. Forty banned words, STE grammar, no LinkedIn cadence.

A desktop pet cat that lives on your screen - wanders, naps, chases your cursor, and comments on what your machine is doing via LLM. Bring your own spritesheet.

Microsoft's deep learning optimization library. Contributed type hints, changelog tooling, and warning fixes. Multiple merged PRs.

The AI Alliance's distributed training framework. Contributed eval schema, CI fixes, and active on the M1 roadmap.

Microsoft's gradient boosting framework. Early contributions to the project.

ROS-Industrial quality-assured robot software components. Contributed to the EU-funded robotics ecosystem.

A "strategic" advisor to "help you achieve your goals." Half a joke, and somehow my most-starred repo by a mile.

Fullscreen takeover tool for pranking your friends. Locks their screen, displays your image/GIF, blocks input until they hit the secret exit combo.

ATS security auditor: 84 payloads across SQLi, XXE, DoS, ML poisoning, and LLM prompt injection. Weaponized resumes for testing how hiring systems break.

Binary infector that creates prepender/postpender executables. The infected binary runs both payload and host, in whichever order you choose.

A network worm that lights up your network. Self-propagates via SSH and SMB, cross-platform.

A simple remote access trojan in Rust. HTTP-based C2, file ops, screenshots, cross-platform.

A Go package implementing a simple logic-bomb: payload that waits quietly, then goes off on a trigger.

A forkbomb as a Go package, via cgo. A tiny lesson in how fast you can bring a machine to its knees.

A command-line tool to corrupt files, byte by byte: controlled destruction for testing (and mischief).

A community malware-development guide (with @AraChn3): the offensive-security notes I wish I had when starting out.

A pile of TryHackMe CTF writeups: the room-by-room grind that taught me to break things. Several live on the blog too.