Security engineering across hostile software, Linux systems, and the tooling between them.
Offensive security / Reverse engineering / Linux and ARM64 / DevSecOps / Security automation
I take work from investigation to a result that can be reproduced, tested, and maintained. Evidence-led debugging, explicit security boundaries, reversible changes, and documentation built for operators.
Unsupported Allwinner A64 hardware, cold-booted to systemd from microSD.
Reproducible U-Boot, TF-A, and Linux tooling; hardware identification; a minimal, hardware-tested Device Tree; and a board-support PATCH v1 submitted for upstream review.
Repository / Submitted source / Lore review
Linux kernel ARM64 Device Tree U-Boot TF-A
A persistent evidence workflow for reverse engineering and malware analysis. Static and dynamic analysis across Ghidraaas, a Windows sandbox, x64dbg, and configurable local LLM reasoning.
|
201 tool sheets. 16 interactive methodology paths. Fully usable offline. PWA and Qt/QML reader for Linux, Windows, and Android, with automated releases and OIDC/Sigstore provenance.
|
Arch/AUR incident auditing without destructive remediation.
Captures evidence hashes, correlates timelines, checks indicators, and produces a reviewable remediation plan for supply-chain incidents.
Incident response Supply-chain security Arch Linux
Cross-distribution packaging with an explicit trust boundary. Arch, Debian, and RPM automation with source provenance, hash verification, GitHub Actions, and documented privacy constraints.
|
A Linux-native control surface for Cloudflare WARP. PySide6 and Qt integration with profiles, diagnostics, multilingual UI, and rendering that follows the system palette.
|
The SPC Glee A64 minimal board-support PATCH v1 is submitted for upstream review. Its exact candidate DTB was hardware-tested through a cold boot to systemd from microSD. Source branch / Public review
The PowerShell installer for the Codex skill was merged upstream through PR #55 and credited in the v0.2.0 release.
- 🚀 Published release SPC Glee A64 Linux v0.1.0-alpha.1 in 0xCyberBerserker/spc-glee-a64-linux
- 🚀 Published release OSCP Arsenal v0.3.0 in 0xCyberBerserker/OSCP-Arsenal
- 🚀 Published release OSCP Knowledge Paths v0.2.0 in 0xCyberBerserker/OSCP-Arsenal
- token-rat-esp: a Spanish Codex skill for compact, maintainable engineering workflows.
- Santuario Dana: volunteer software supporting an animal sanctuary affected by the Valencia DANA disaster.
- Mente Activa: accessible educational activities for older adults, families, and caregivers.
Before the current engineering work, I served as a global moderator in two historic Spanish-speaking security communities: Hack x Crack and Underc0de. The Cuadernos de Hack x Crack first pulled me toward computing and hacking.
Hack x Crack archive / Underc0de profile
That background still shapes how I evaluate tools: useful beats decorative, evidence beats noise, and public work should state its boundaries clearly.
LinkedIn for professional contact.