Projects
I build practical tools for reconnaissance, segmentation testing, vulnerability research, and secure operations. Each repository below links directly to its source and states its current operating limits.
Selected projects
Inspect the implementation, evidence, and boundaries behind each project.
CyberKareem/kameHunt
An LLM-assisted variant-analysis engine that validates and ranks static-analysis matches into a short list of manually-verifiable leads.
CI-tested · benchmark included · 6 of 7 candidate patterns surfaced in a documented experiment.
CyberKareem/surfacelens
A local-first attack-surface workbench for turning common recon output into explainable priorities.
4 unit tests · local-first workflow · 4 export formats
CyberKareem/seg-test
A scoped CDE reachability evidence runner for authorized PCI DSS segmentation-testing workflows.
source guard · dry run · timestamped SHA-256 evidence
Additional repositories
Smaller utilities and research prototypes with their current status and source snapshots.
A released bootable media-sanitization prototype with explicit destructive-use and standards-review boundaries.
A public v1.0.0 ISO release exists. Its source and release need renewed validation against current hardware, an open boot-media compatibility report, and NIST SP 800-88 Rev. 2 before operational reliance.
Source snapshot ceee1fb opens the pinned GitHub revision in a new tabCurrent NIST SP 800-88 Rev. 2 opens in a new tabAn Ollama-backed engagement assistant prototype for session memory, findings, and walkthrough export.
A v1.0 tag exists, but there is no formal GitHub release or public test suite. Session artifacts require normal sensitive-data controls, and the browser interface still depends on third-party assets and needs hardening.
Source snapshot fbfcc1d opens the pinned GitHub revision in a new tabAn interactive BitLocker and TPM state-management prototype for Windows device decommissioning research.
There is no release or test suite, and an open issue identifies missing recovery-key backup behavior. Independent destructive-path validation and a current NIST SP 800-88 Rev. 2 review are required before operational use.
Source snapshot b0ee30b opens the pinned GitHub revision in a new tabCurrent NIST SP 800-88 Rev. 2 opens in a new tabAn offline username and email-handle generator for authorized identity and defensive OSINT workflows.
The CLI and sample generation were verified and input remains local. The README and source framing need cleanup, and no automated test suite or formal release exists.
Source snapshot 3610097 opens the pinned GitHub revision in a new tabAn Nmap-driven recon helper for authorized labs, staged discovery, reusable artifacts, and follow-up guidance.
Two syntax-valid Shell workflows are public. Documentation, dependency checks, automated tests, and a formal release remain outstanding; the scans are active and can be noisy.
Source snapshot b5f4ba5 opens the pinned GitHub revision in a new tabA NetExec orchestration CLI for authorized credential validation across common infrastructure services.
The single-file CLI is syntax-valid but has no tests or release. Operators must manage account-lockout risk and protect credentials exposed through command, verbose, or JSON output.
Source snapshot 6fa6569 opens the pinned GitHub revision in a new tab