"Build from first principles. Inspect at the byte level. Automate with sovereign local AI."
🎓 BSc Computer Science (Informatika) @ FEI VŠB-TUO (Ostrava, Czechia)
🔬 Bachelor's Thesis: Linux Sandbox for Malware Analysis with Local AI & FFTE (MITRE ATT&CK)
🛠️ Primary Toolchain: C++20 • Python 3.12 • CMake • Linux Kernel (/proc, eBPF) • Ghidra • LightGBM • llama.cpp • Tauri 2.x / React 19 • ESP32-S3
📋 Active Progression Tracker: QUEST_LOG.md — Master Cybersecurity & Systems Engineering Quest Log
| Domain | Repository | Core Focus & Deliverables | Current Tier |
|---|---|---|---|
| 🛡️ DFIR & Malware Sandboxing | fast-forensic-triage-extractor |
Cross-platform C++20 live-response triage, Linux /proc state diffing, ELF Shannon entropy, KVM sandbox telemetry |
🔵 Lv. 35 Hunter |
| ⚙️ Reverse Engineering & Game Hacking | re-dojo (Web) & lowlevel-re |
29-Tier RE RPG Academy, C++20 practice dojo, 200 games masterlist, auto-grader, ELF/PE internals, memory hooking | 🔴 Tier SSS Demigod |
| 🧠 Security Data Science & Local AI | ai-sec-triage-engine |
Anomaly clustering (DBSCAN), LightGBM malware triage, offline SLM (Llama-3.2 / Qwen-2.5 via llama.cpp) |
🔵 Lv. 32 Analyst |
| 📡 Hardware, Firmware & IoT | iot-hardware-arsenal |
Router/IoT firmware unpacking (SquashFS), UART/SPI dumping, ESP32-S3, BLE GATT telemetry & nRF24 RF security |
🟢 Lv. 22 Tinkerer |
| ⚔️ Offensive Pentest & Network Sec | offensive-pentest-labs |
Network traffic profiling (Zeek / Wireshark), Linux PrivEsc, Active Directory, OWASP Web & Atomic Adversary emulation |
🟢 Lv. 20 Scout |
| 🖥️ Sovereign Desktop Systems | deave-os & SITR |
Local-first AI Second Brain (Tauri 2.x + FastAPI) & real-time C++20 camera/microphone access overlay monitor |
🔵 Lv. 40 Architect |
- Cisco Networking Academy — Introduction to Cybersecurity
- National Cyber Security Training Academy (NCSTA) — Cyber Security 101
- CyberWarFare Labs (CW Labs) — Blue Team Fundamentals (
BTF) & Certified Cyber Security Analyst (C3SA) - IBM & UNDP — Cybersecurity Fundamentals & InfoSec
- EF SET — English Certificate
- ISC2 CC — Certified in Cybersecurity (Core Security Principles, Network & Access Controls)
- Microsoft SC-900 — Security, Compliance, and Identity Fundamentals
- CompTIA Security+ (SY0-701) — Industry-standard baseline certification
- BTL1 (Blue Team Level 1) or CCD (Certified CyberDefender) — 24-hour practical DFIR, memory forensics, SIEM & threat hunting exam
- HTB CPTS (Hack The Box Certified Penetration Testing Specialist) — Full-scope enterprise network & web penetration testing
- HTB CDSA (Certified Defensive Security Analyst) — Advanced SOC incident detection & malware triage
- OSCP (Offensive Security Certified Professional) — 24-hour live exploitation exam
- GIAC GREM (Reverse Engineering Malware) — In-depth assembly, unpacking & malware internals
- OffSec OSED / OSRE — Exploit Development & Advanced Reverse Engineering
- 📖 Kyle Cucci (2024) — Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats (In Progress — BSc Thesis Core)
- 📖 Bruce Nikkel (2021) — Practical Linux Forensics: A Guide for Digital Investigators (In Progress — FFTE Linux Engine)
- 📖 Dennis Andriesse (2018) — Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly (In Progress)
- 📖 Joshua Saxe & Hillary Sanders (2018) — Malware Data Science: Attack Detection and Attribution (In Progress — ZSU ML Pipeline)
- 📖 Randal E. Bryant & David R. O'Hallaron — Computer Systems: A Programmer's Perspective (CS:APP)
- 📖 Michael Sikorski & Andrew Honig — Practical Malware Analysis
- 📖 Aditya Gupta — The IoT Hacker's Handbook
| Project | Description | Stack |
|---|---|---|
re-dojo (Live Web RPG) |
Interactive Reverse Engineering & Offline Game Hacking RPG Academy (29 Tiers, 18 C++20 Labs, Top 200 Games, Auto-Grader) | Cheat Engine · Ghidra · x64dbg · C++20 |
L2C2-Study-Server |
Minimal Lineage 2 Classic C2 login/game server emulator for OS & network protocol research | C++ · Sockets |
study-widgets |
Local-first desktop study widgets: Pomodoro, habits, books, schedule & weekly stats | C++ · Qt |
bonanza-clone |
Stealth platformer inspired by Bonanza Brothers written from scratch | C++17 · SDL2 |
Bulanci-Kitty |
2D top-down shooter with AI bots, weapons, HUD & records system (VŠB-TUO project) | C · SDL2 |
InvScan |
Android inventory scanner app with Google ML Kit OCR & REST API backend | Java · Laravel · MariaDB |
- Security & RE:
Ghidra·GDB (pwndbg/gef)·Wireshark·Zeek·radare2·binwalk·AFL++·angr·CyberChef - Virtualization & Systems:
QEMU/KVM·libvirt·Docker· EndeavourOS / CachyOS (KDE Wayland) daily driver - Spoken Languages: Kazakh / Russian (Native) · Czech (B2) · English (B2)
All security testing, malware analysis, and reverse-engineering research is conducted strictly within isolated, legal, and authorized laboratory, CTF, or academic environments.