Projects
Security tools, browser extensions, and collaborative threat research.
CtrlAltIntel
I co-founded CtrlAltIntel, a volunteer community of researchers analyzing threats, disclosing compromises, and providing threat intelligence.
Browse all 27 research cases
- Russian and Allied Government Systems Compromised in Targeted Campaigns
- The Gentlemen RaaS: Origins, OPSEC & OSINT
- INC Ransomware affiliate targets ESXi & NAS Devices in AD environment
- Burnt by Burgers: Highlighting Void Blizzard’s Russian State Links
- Chinese actor compromises thousands of Wordpress sites
- Wordpress Exploitation Exposure Checker
- South-East Asian Military Entities Targeted via cPanel (CVE-2026-41940)
- Watch Guard! Qilin affiliate exploits network appliances for initial access
- KongTuke on compromised WordPress sites, DDOS Botnets and Cybercriminal Feuds
- Dissecting FudCrypt: A Real-World Malware Crypting Service Analysis
- Supply-Chain Attacks, TP-Link devices & a pair of socks
- The BuddyBoss Attack: Full Incident Analysis
- The BuddyBoss Attack: Claude’s Supply-Chain Attack
- Inside the UPMI Phishing-as-a-Service Platform
- FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops
- MuddyWater Exposed: Inside an Iranian APT operation
- Investigating Suspected DPRK-Linked Crypto Intrusions
- Diesel Vortex: Exploring connections to Russian LLCs
- Aeternum Loader: Inside the binary
- Aeternum Loader: When your C2 lives forever
- ErrTraffic Under the Hood: A look at the source code
- Attack on *stan: Your malware, my C2
- Where is the EDR? Sliver C2 running from firewalls
- How not to run a RaaS Operation
- Scanning CVE-2025-55182 for the greater good
- React2Shell (CVE-2025-55182) actively exploited by threat actors
- From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese Universities
Browser Extensions
A collection of security, productivity, and browser workflow extensions.
Browse all 18 extensions
- ClipShield Edge listing
Interrupts ClickFix and clipboard-based attack chains; local-only with zero telemetry.
- OffRecord — PGP for Discord GitHub
One-click end-to-end PGP encryption for private Discord DMs and servers.
- Arabic Keyboard Chrome Web Store
A virtual keyboard for typing Arabic across websites.
- Color Picker - Eyedropper Tool Chrome Web Store
Samples colours directly from websites.
- Block Yourself from Analytics Chrome Web Store
A privacy utility for reducing analytics visibility during browsing.
- Face Shape Detector Chrome Web Store
An experimental image-analysis and classification utility.
- Custom Cursor for Chrome Chrome Web Store
Applies cursor customisation across websites.
- Save Image As PNG Chrome Web Store
A quick workflow for saving web images as PNG.
- Search With AI Chrome Web Store
Speeds up AI-assisted search actions from the browser.
- GMB Categories Chrome Web Store
A utility for Google Business Profile category workflows.
- Favicon Detector Chrome Web Store
Identifies and works with site favicons.
- Website SEO Checker Chrome Web Store
Checks page SEO and metadata.
- AI QuickLaunch Chrome Web Store
Shortcuts for common AI-related browser actions.
- Extension Manager Chrome Web Store
A more direct way to manage installed Chrome extensions.
- LinkedIn Formatter Chrome Web Store
Formatting and workflow improvements inside LinkedIn.
- Country Code Chrome Web Store
Quick country-code lookup and reference.
- View CSS Chrome Web Store
Inspects and works with CSS on live websites.
- Heading Extractor Extension details
Extracts page headings and document structure.