"Forging tools that turn manual precision into automated, SIEM-ready offensive workflows."
I am a Offensive Security Specialist and Red / Purple Team Tool Developer. My mission is to identify critical architectural vulnerabilities before adversaries do by orchestrating custom automation workflows, developing precision tooling, and bridging the gap between offensive operations and defensive telemetry.
- Current Focus: Preparing for the CEH v13 certification (Target: July 2026) & advancing EDR-evasive automation.
- Active Project: Expanding the NOEMVEX Suite, deploying highly decoupled, OOP-based offensive engines with native MITRE ATT&CK and SIEM integration.
- Career Goal: Securing a Senior Red Team Engineer or Purple Team Architect role within the European Market.
- Core Competencies: Active Directory Architecture Exploitation, Advanced Python Security Tooling, Historical OSINT & Entropy Analysis, and WAF/TLS Evasion.
- Philosophy: Automation is not about replacing the operator; it's about eliminating operational noise so the operator can focus on critical logic and stealth.
| Project | Edition | Status | Description |
|---|---|---|---|
| NOEMVEX-APEX-PREDATOR | v6.0 [Omni-Hunter] | Stable ✅ | Advanced Active Directory Offensive Engine. Specializes in Kerberos Hygiene (krbtgt), Unconstrained Delegation abuse, RBCD Backdoors, and LAPS extraction. Outputs SIEM Schema v3.0 JSON. |
| NOEMVEX-CHRONOS | v5.0 [Absolute Vanguard] | Stable ✅ | The Ultimate Offensive OSINT Weapon. Features Mathematical Entropy Analysis with Confidence Scoring, Multi-Threaded Cloud Zombie Asset Hijacking, and Nuclei Template generation. |
| NOEMVEX-WEB-ARCHITECT | v4.1 [Absolute Vanguard] | Stable ✅ | Highly Stable Web & API Reconnaissance Suite. Features Zero-False-Positive JWT Validation, DOM mapping, and PII/BOLA discovery via active endpoint probing. |
| NOEMVEX-WEB | v2.0 [Absolute Vanguard] | Stable ✅ | WAF-Resilient Discovery Engine. Employs Custom SSL Adapters (SECLEVEL=1) with Exponential Backoff, Soft-404 Baseline Filtering, and Hybrid Subdomain resolution (Passive CT + Active DNS). |
Command Center
- OS: Linux & MacOS & Windows
Development & Engineering
- Python 3 (Advanced OOP, Multi-threading, Raw Sockets, Custom HTTP Adapters)
- Bash / PowerShell Automation
Reconnaissance & Exploitation
- Active Directory Exploitation (RPC/SMB/LDAP, PtH, DCSync Vectors)
- WAF Evasion, Protocol Downgrade Resilience, Cryptographic Validation
- Burp Suite, Nmap (NSE), Metasploit, Wireshark, SQLMap, Nessus