Projects

A pentesting toolkit that runs as an MCP server. Wraps 22 industry-standard security tools including Metasploit Framework behind a 6-layer safety architecture, exposing 43 MCP endpoints to AI assistants with input validation, output sanitisation, and session-aware context budgeting for local AI models.

TypeScript MCP client for the Raven Nest pentesting server. Communicates via JSON-RPC 2.0 over stdio, providing tool discovery, inspection, and execution through both an interactive REPL and one-shot CLI commands.

Comprehensive automation tool for securing Linux systems. Scans for misconfigurations, applies hardening recommendations, and enables safe rollback of changes. Features CLI, desktop (Tauri), and web interfaces. Published on the Arch User Repository (AUR).

GTK4 keybinding manager for Hyprland with conflict detection, security validation, and automatic backups. Published on the Arch User Repository (AUR).

Common security tasks like password strength analysis, hash generation, and basic network scanning often require multiple separate tools or online services (which may not be trustworthy). Need a unified, offline toolkit for security professionals and developers.

Need a lightweight, real-time system monitoring solution that doesn't require heavyweight frameworks or complex installations. Traditional monitoring tools are often over-engineered for personal use or local development environments.

Chess application built as a Rust workspace with clean crate separation - pure domain logic, async Stockfish UCI engine integration, and an egui desktop GUI with graphical board rendering.

Backing up GitHub repositories manually is tedious and error-prone. Need an automated solution to export repositories with full metadata (issues, pull requests, releases) for archival, migration, or offline access.

A hand-rolled BitNet b1.58 implementation in pure Rust. Every component written from scratch as a learning exercise: tensor type with AVX-512/AVX2 SIMD matmul, tape-based autograd, ternary quantisation with straight-through estimator, transformer block (RMSNorm, multi-head attention with RoPE, SwiGLU FFN), training loop, KV-cached inference, and a CUDA back-end with cuBLAS int8 GEMM on tensor cores. No third-party ML dependencies.

Desktop TV guide for Swedish television. Fetches programme schedules from tv24.se, caches them locally in SQLite, and presents them in a clean timeline grid. Designed for people who just want to see what's on: large text, simple navigation, no account required.

Spotlight region video recorder for wlroots Wayland compositors. Draw a rectangle and record only that area: everything outside dims like a spotlight while you select, then the dim lifts to a single bright border so the rest of the screen stays usable while the region records. The overlay never appears in the recording.

A Rust CLI tool for extracting page titles, links, headers, and meta tags from web pages. Supports an interactive prompt or scripted invocation via flags. Outputs plain text, JSON, or HTML.

Most portfolio websites focus on aesthetics over security. I wanted mine to practise the security work I write about - and to document every measure openly so it can be reviewed.