Independent security researcher building the NullSec Security Framework — a comprehensive ecosystem of 135+ specialized security tools and a complete Linux distribution. My focus spans cloud security, AI/ML security research, hardware hacking, automotive systems, mobile security, and traditional penetration testing.
Core Projects:
- 🐧 NullSec Linux v5.0 — Security distribution with 135+ tools, 5 specialized editions, 4 architectures
- 📱 NullKia v3.0 — Mobile security framework for 18 manufacturers with baseband, cellular, and TEE tools
- ☁️ Cloud Security Suite — AWS, GCP, Azure, Kubernetes, Terraform auditing
- 🤖 AI/ML Security Suite — LLM red teaming, prompt injection, model auditing
- 🔌 Hardware Security Suite — SDR, RFID, CAN bus, JTAG, glitch attacks
- 🚗 Automotive Security Suite — CAN analysis, OBD-II, UDS protocol, key fob reverse engineering
| Edition | Description | Tools |
|---|---|---|
| Standard | Full security distribution with complete toolkit | 135+ |
| Cloud Pentest | AWS, GCP, Azure, K8s, Terraform security | 6 |
| AI/ML Security | LLM red team, prompt inject, model audit | 5 |
| Hardware Hacking | SDR, RFID, CAN, JTAG, glitch attacks | 5 |
| Automotive Security | Vehicle systems, CAN, OBD-II, UDS | 4 |
Architectures: AMD64, ARM64, RISC-V, Apple Silicon (Asahi)
| Feature | Description |
|---|---|
| 18 Manufacturers | Samsung, Apple, Google, OnePlus, Xiaomi, Huawei, Motorola, LG, Sony, Nokia, Nothing, OPPO, Vivo, Realme, ASUS, ZTE, Fairphone, TCL |
| Baseband Tools | Shannon, Qualcomm, MediaTek, Exynos, Apple modem exploitation |
| Cellular Security | 5G/LTE security, eSIM tools, IMSI analysis, carrier unlock |
| TEE/TrustZone | Secure Element, BootROM extraction, TrustZone research |
| GUI & Plugins | Interactive dashboard, extensible plugin architecture |
| Tool | Description |
|---|---|
| nullsec-cloudaudit | Multi-cloud security configuration auditing |
| nullsec-k8sscan | Kubernetes cluster security scanner |
| nullsec-awsrecon | AWS reconnaissance and enumeration |
| nullsec-gcphunt | Google Cloud Platform security hunting |
| nullsec-azuresweep | Azure infrastructure security sweeping |
| nullsec-terraform-scan | Terraform IaC security scanning |
| Tool | Description |
|---|---|
| nullsec-llmred | LLM red teaming and jailbreak testing |
| nullsec-promptinject | Prompt injection vulnerability scanner |
| nullsec-modelaudit | ML model security auditing |
| nullsec-adversarial | Adversarial example generation |
| nullsec-datapoisoning | Training data poisoning detection |
| Tool | Description |
|---|---|
| nullsec-sdr | Software-defined radio security analysis |
| nullsec-rfid | RFID/NFC exploitation toolkit |
| nullsec-canbus | CAN bus analysis and injection |
| nullsec-jtag | JTAG/SWD debugging and extraction |
| nullsec-glitch | Voltage glitching and fault injection |
| nullsec-uart | UART exploitation toolkit |
| Tool | Description |
|---|---|
| nullsec-carfuzz | Automotive ECU fuzzing framework |
| nullsec-obdii | OBD-II diagnostic exploitation |
| nullsec-uds | UDS protocol security testing |
| nullsec-keyfob | Key fob signal analysis and replay |
| Tool | Language | Description |
|---|---|---|
| nullsec-kernspy | Go | Linux kernel module analyzer |
| nullsec-memguard | Zig | Memory protection monitor |
| nullsec-netseer | Haskell | Network traffic analyzer |
| nullsec-sockwatch | Nim | Socket connection monitor |
| nullsec-cryptocheck | Ada/SPARK | Cryptographic verifier |
| nullsec-injector | Rust | Process injection toolkit |
| nullsec-bingaze | C++20 | ELF binary analyzer |
| nullsec-rootcheck | D | Rootkit detector |
| Metric | Value |
|---|---|
| 📦 Public Repositories | 373 |
| 🛠️ Security Tools | 135+ |
| 🌍 Programming Languages | 15+ |
| 📱 Mobile Manufacturers | 18 |
| 🐧 Linux Editions | 9 |
| 🖥️ Architectures | 4 |
All tools are intended for authorized security testing and educational purposes only.
© 2024-2026 bad-antics • Security Engineering & Systems Research