🇺🇸 English · 🇧🇷 Português
Red Team · Offensive Security · Pentester · Bug Bounty Hunter
AI-powered automation and a few side projects along the way.
- 🛡️ Bug bounty: 🏆 Top 6 worldwide on the BugPay leaderboard and featured for one of the critical vulnerabilities I reported
- 🤖 Building AI-powered automated pentest tools
- 🌱 Always learning how systems work, so I can break them
Merged pull requests in projects I use.
| Organization | Merged | Pull requests |
|---|---|---|
| ProjectDiscovery | 6 | katana#1908 · subfinder#1981 · dnsx#1091 · httpx#2685 · nuclei-templates#17506 · naabu#1801 |
| 3 | gonids#258 · gvisor#16480 · go-tpm#451 | |
| Apple | 2 | pkl-go#277 · password-manager-resources#1862 |
| fortra | 1 | impacket#2346 |
| Hydra Launcher | 1 | hydra-themes#255 |
| jadx | 1 | jadx#3030 |
| Kubescape | 1 | regolibrary#855 |
| Microsoft | 1 | kiota-python#832 |
| mitmproxy | 1 | mitmproxy#8512 |
| NSA | 1 | ghidra#10011 |
| NuvioMedia | 1 | NuvioTVSmart#1151 |
| OJ | 1 | gobuster#678 |
| Truffle Security | 1 | trufflehog#5471 |
| Project | Description |
|---|---|
| Raijin | 15 security tools built for AI agents. Each wraps an engine you already use (nuclei, httpx, ffuf, katana...) and returns a small, deduplicated, ranked JSON instead of thousands of lines (raijin-scan: 39× to 134× fewer tokens than nuclei's output). One MCP server exposes them all. MIT |
| QuarkScan | Autonomous AI multi-agent pentest for test automation and vulnerability analysis. 🚧 Under active development |
| Caramelo | Passive username OSINT: checks 5,000+ sites for public profiles and builds a dossier (name, bio, avatar, links). No API keys, no logins |
| HackingLearning | Study notes and material about hacking |
| Project | Description |
|---|---|
| Fanzão de Música | Personal music catalog to "platinum" your favorite artists' discographies. Rate tracks and track progress, with 100% private sync via GitHub |
| Stochastic | Minimalist portfolio manager: smart rebalancing, real-time quotes and local-first storage |
| FreeGameFinder | Full-stack app that notifies you about free games on Epic Games and Steam |
| tmux-watchdog | Keeps tmux sessions running Claude alive via cron, with a management UI |
| WhatsApp-PhotoGif | "Animated" WhatsApp profile picture by cycling through GIF frames (Baileys) |
"The greatest obstacle to discovery is not ignorance — it is the illusion of knowledge."
— Daniel J. Boorstin