Penetration tester and security researcher, building my own offensive tooling. Computer Science student by day, red-team tinkerer by night.
- 🔓 Penetration testing engineer (web / network)
- 🛠️ Building offensive security tools from scratch (proxy, MITM, WebShell protocols)
- 📚 CS student, continuously exploring red-team techniques
- ⚖️ All testing is performed on authorized targets only
| Area | Technologies |
|---|---|
| Security Tooling | Burp Suite, Metasploit, Nmap, sqlmap, yakit |
| Web | HTTP/HTTPS, WebSocket, MITM, SSRF/SQLi/XSS, WebShell (Godzilla / Behinder / AntSword) |
| Protocols | TCP/IP, TLS, SOCKS, SSH, CDP |
| Languages | Python, TypeScript, Java, SQL, Bash |
| Desktop | Electron, Node.js, esbuild |
| Databases | MySQL, Neo4j |
| DevOps | Git, GitHub |
- HermesPentBox — AI-powered local pentest workbench (my flagship project). Built-in MITM proxy with CA-signed HTTPS interception → 10 parallel AI sub-agents analyze traffic → one-click single-endpoint exploitation → Burp-style binary project persistence with per-project isolation. (Electron · TypeScript · Node.js · Neo4j · Hermes Agent)
- GitHub: @LuKeyC-NetSEC