Independent security researcher building the bad-antics ./Dev — a comprehensive ecosystem of 135+ specialized security tools and a complete Linux distribution. My focus spans cloud security, AI/ML security research, hardware hacking, automotive systems, mobile security, and traditional penetration testing.
Core Projects:
- 🐧 NullSec Linux v5.0 — Security distribution with 135+ tools, 5 specialized editions, 4 architectures
- 📱 NullKia v3.0 — Mobile security framework for 18 manufacturers with baseband, cellular, and TEE tools
- ☁️ Cloud Security Suite — AWS, GCP, Azure, Kubernetes, Terraform auditing
- 🤖 AI/ML Security Suite — LLM red teaming, prompt injection, model auditing
- 🔌 Hardware Security Suite — SDR, RFID, CAN bus, JTAG, glitch attacks
- 🚗 Automotive Security Suite — CAN analysis, OBD-II, UDS protocol, key fob reverse engineering
| Edition | Description | Tools |
|---|---|---|
| Standard | Full security distribution with complete toolkit | 135+ |
| Cloud Pentest | AWS, GCP, Azure, K8s, Terraform security | 6 |
| AI/ML Security | LLM red team, prompt inject, model audit | 5 |
| Hardware Hacking | SDR, RFID, CAN, JTAG, glitch attacks | 5 |
| Automotive Security | Vehicle systems, CAN, OBD-II, UDS | 4 |
Architectures: AMD64, ARM64, RISC-V, Apple Silicon (Asahi)
| Feature | Description |
|---|---|
| 18 Manufacturers | Samsung, Apple, Google, OnePlus, Xiaomi, Huawei, Motorola, LG, Sony, Nokia, Nothing, OPPO, Vivo, Realme, ASUS, ZTE, Fairphone, TCL |
| Baseband Tools | Shannon, Qualcomm, MediaTek, Exynos, Apple modem exploitation |
| Cellular Security | 5G/LTE security, eSIM tools, IMSI analysis, carrier unlock |
| TEE/TrustZone | Secure Element, BootROM extraction, TrustZone research |
| GUI & Plugins | Interactive dashboard, extensible plugin architecture |
| Tool | Description |
|---|---|
| nullsec-cloudaudit | Multi-cloud security configuration auditing |
| nullsec-k8sscan | Kubernetes cluster security scanner |
| nullsec-awsrecon | AWS reconnaissance and enumeration |
| nullsec-gcphunt | Google Cloud Platform security hunting |
| nullsec-azuresweep | Azure infrastructure security sweeping |
| nullsec-terraform-scan | Terraform IaC security scanning |
| Tool | Description |
|---|---|
| nullsec-llmred | LLM red teaming and jailbreak testing |
| nullsec-promptinject | Prompt injection vulnerability scanner |
| nullsec-modelaudit | ML model security auditing |
| nullsec-adversarial | Adversarial example generation |
| nullsec-datapoisoning | Training data poisoning detection |
| Tool | Description |
|---|---|
| nullsec-sdr | Software-defined radio security analysis |
| nullsec-rfid | RFID/NFC exploitation toolkit |
| nullsec-canbus | CAN bus analysis and injection |
| nullsec-jtag | JTAG/SWD debugging and extraction |
| nullsec-glitch | Voltage glitching and fault injection |
| nullsec-uart | UART exploitation toolkit |
| Tool | Description |
|---|---|
| nullsec-carfuzz | Automotive ECU fuzzing framework |
| nullsec-obdii | OBD-II diagnostic exploitation |
| nullsec-uds | UDS protocol security testing |
| nullsec-keyfob | Key fob signal analysis and replay |
| Tool | Language | Description |
|---|---|---|
| nullsec-kernspy | Go | Linux kernel module analyzer |
| nullsec-memguard | Zig | Memory protection monitor |
| nullsec-netseer | Haskell | Network traffic analyzer |
| nullsec-sockwatch | Nim | Socket connection monitor |
| nullsec-cryptocheck | Ada/SPARK | Cryptographic verifier |
| nullsec-injector | Rust | Process injection toolkit |
| nullsec-bingaze | C++20 | ELF binary analyzer |
| nullsec-rootcheck | D | Rootkit detector |
| Metric | Value |
|---|---|
| 📦 Public Repositories | 456 |
| 🛠️ Security Tools | 135+ |
| 🌍 Programming Languages | 15+ |
| 📱 Mobile Manufacturers | 18 |
| 🐧 Linux Editions | 9 |
| 🖥️ Architectures | 4 |
All tools are intended for authorized security testing and educational purposes only.
© 2024-2026 bad-antics • Security Engineering & Systems Research
Currently contributing NullSec tools to 80 open PRs (6 merged!) across the security community:
| Category | PRs | Highlights |
|---|---|---|
| 🏆 Awesome Lists | 51+ | awesome-rust, awesome-security, awesome-pentest |
| 🔴 Red Team Resources | 5+ | Red-Teaming-Toolkit, RedTeam-Tools |
| 🐛 Bug Bounty | 3+ | nahamsec, KingOfBugBounty |
| 🎓 Educational | 3+ | h4cker, Ethical-Hacking-Tools |
✅ Merged PRs (Community Accepted):
- The-Art-of-Hacking/h4cker (24.8k ⭐) ✅ MERGED
- Astrosp/Awesome-OSINT-For-Everything (2k ⭐) ✅ MERGED
Pending High-Value PRs:
- wtsxDev/reverse-engineering (9.9k ⭐)
- nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters (11.7k ⭐)
- infoslack/awesome-web-hacking (6.7k ⭐)
<- Support for SF, OSDN, VPS, Cloudflare R2, Internet Performance optimized --> <- Support for SF, OSDN, VPS, Cloudflare R2, Internet Optimized 2026-01-24 -->