┌──(amit㉿archlinux)-[~]
└─$ cat << 'EOF' > profile.json
{
"engineer": "Amit Padhan",
"specialization": "Offensive Security Researcher & Linux Systems Engineer",
"workstation": "Arch Linux (Hyprland / Wayland + Kitty + Neovim)",
"flagship_project": "linux-eye (Real-time Linux EDR Monitor)",
"core_domains": [
"Kernel Event Hooking (inotify, netlink udev)",
"Host-based Intrusion Detection & Telemetry (EDR)",
"Network Reconnaissance & Automated Exploitation Sandboxes",
"Air-gapped & Offline AES-256-GCM Vault Architectures"
]
}
EOF👁️ Flagship Spotlight: linux-eye
Lightweight real-time Linux security & endpoint detection monitor (EDR)
An autonomous host-based intrusion detection daemon running seamlessly on Linux workstations and servers, watching for malicious behavior across 5 dedicated telemetry engines:
- ⚙️ Process Telemetry Engine: Intercepts suspicious process lifecycles via
psutil(reverse shells likebash -i/nc -e, download-cradles likecurl | sh, inline scripts, and persistence routines). - 🌐 Network Socket Engine: Stateful rolling-window analyzer detecting automated port scanning and reconnaissance sweeps.
- 📂 Kernel Filesystem Watcher: Direct Linux kernel
inotifyhooks alerting on unauthorized modifications to/etc/passwd,/etc/shadow, and/etc/sudoers. - 🔐 Authentication & PAM Stream: Asynchronous journal telemetry parsing sudo/SSH/PAM sessions to flag credential attacks and trigger sliding-window brute-force alerts.
- 🔌 Hardware Netlink Engine: Kernel netlink udev watcher flagging unauthorized USB storage and peripheral insertions.
| Domain | Tools & Technologies |
|---|---|
| Languages | Python · C / C++ · Bash · Java · Lua · Dart |
| Offensive Security | Nmap · Burp Suite · Wireshark · Metasploit · Gobuster · Evil-WinRM · Hashcat · Hydra |
| Systems & Virtualization | Arch Linux · Kali Linux · QEMU / KVM · Docker · Systemd · Linux Bridge (br0) |
| Desktop Environment | Hyprland (Wayland) · Waybar · Kitty · Neovim · SDDM (QML) |
| Project | Stack | Description | Stars |
|---|---|---|---|
| locker | Python AES-256-GCM |
100% offline, zero-knowledge encrypted vault & virtual drive application with automated backup. |  |
| ReconX | Python Sockets |
Multi-threaded network reconnaissance framework with TCP scanning, banner grabbing, and fuzzing. |  |
| qemu-kvm-lab | Shell QEMU/KVM |
Automated isolated virtualization lab environment on Arch Linux (Win 11, Kali, Metasploitable2, TPM 2.0). |  |
| cybersecurity-labs | Markdown Labs |
Practical vulnerability assessments, penetration testing notes, and hands-on CTF writeups. |  |
| linux-dotfiles | Shell Hyprland |
Daily driver Arch Linux Wayland desktop environment setup (Catppuccin Mocha, Waybar, Rofi, Kitty). |  |
| security-notes | Markdown CTF |
Curated offensive security documentation, TryHackMe & Hack The Box walkthroughs, and cheat sheets. |  |
| erp-autologin | Java Android |
Automated login assistant featuring on-device OCR CAPTCHA recognition and secure credential storage. |  |
All security tools, scripts, and lab configurations are developed strictly for authorized security assessments, defensive engineering, academic research, and ethical educational purposes.