Offensive security engineer (OSCP since 2019) building post-quantum, self-custody wallet infrastructure for the QRL / Zond chain.
Two threads run through this account:
Offensive security. OSCP since 2019 - penetration testing, red-team tooling, and bug hunting. Most of that tooling (loaders, C2, AD tradecraft, phishing infrastructure) is private and engagement-scoped, so the public footprint here is deliberately small. What is public leans defensive and reusable - see ADCSAudit.
Post-quantum infrastructure. I lead DigitalGuards, building a full self-custody wallet ecosystem for QRL's Zond post-quantum chain - web, desktop, and browser wallets, a dApp-connect SDK, liquid staking, a token factory, a name service, and a chain explorer. The cryptography that matters (ML-KEM key exchange, ML-DSA signing) is isolated and hardened rather than bolted on.
Post-quantum wallet ecosystem · DigitalGuards
🖥️ myqrlwallet-desktop · TypeScript
Post-quantum, self-custody QRL desktop wallet. A hardened four-process Electron architecture that isolates an ML-DSA-87 signer in its own process, so private-key material never shares an address space with the renderer or network code.
🌐 myqrlwallet-frontend · TypeScript
Modern React web wallet for QRL - PIN-encrypted seed storage, ERC20/QRC20 token support, multi-network, and post-quantum dApp Connect integration.
🔌 myqrlwallet-connect · TypeScript
@qrlwallet/connect - the dApp → wallet SDK for QRL Connect v2. Post-quantum ML-KEM-768 + AES-256-GCM transport over a Socket.IO relay, an EIP-1193 provider, QR / deep-link pairing, and session persistence.
🧩 myqrlwallet-backend · JavaScript
Server-side API and services powering the web wallet against the QRL v2 (Zond) blockchain.
💧 QuantaPool · Solidity
Decentralised QRL liquid-staking protocol - stake on a post-quantum chain without giving up liquidity.
🏭 QRC20-Factory · JavaScript
On-chain ERC20/QRC20 token factory for Zond - deploy customisable tokens with configurable parameters.
🔖 myqrlwallet-qns · Solidity
QRL Name Service (QNS) - human-readable names for Zond addresses. (alpha)
🛰️ zondscan · Go
Fast proof-of-stake block explorer for the Zond / QRL network - Next.js frontend, Go backend.
🪪 ADCSAudit · PowerShell
Single-file, dependency-free auditor for Active Directory Certificate Services ESC misconfigurations. No modules, no RSAT, no binaries to drop - run it straight from a domain-joined jump box. Enumeration only: it never requests a certificate and never changes anything, flagging the ESC privilege-escalation paths from SpecterOps' Certified Pre-Owned research.
The rest of my offensive toolkit - shellcode loaders, C2 implants, credential tooling, phishing infrastructure - is private and used only under authorization on engagements.
Open-source contributions & translations
- LSTAR-EN - English translation of the LSTAR Cobalt Strike toolkit (23★)
- geacon_plus-en - English port of a Go Cobalt Strike beacon (4★)
- QRL ecosystem contributions across theQRL
Languages · TypeScript · Go · Solidity · Rust · Python · Nim · Odin · C / C++ · PowerShell · Bash Offensive · Active Directory · C2 & AV/EDR evasion R&D · web & network pentesting · bug hunting Crypto / chain · ML-KEM · ML-DSA · Zond EVM · smart-contract development Platforms · Linux · Docker · Electron · Node.js
Post-quantum by default · offensive by trade.
