I build open-source cybersecurity software focused on helping defenders understand attackers instead of simply blocking them.

My projects revolve around deception engineering, threat intelligence, AI security, OSINT, anti-abuse systems, and large-scale internet measurement.

Rather than relying on third-party services, I prefer building privacy-respecting, self-hosted solutions that give defenders complete visibility into what is happening on their infrastructure.

🍯 High-interaction Honeypots

🛡️ CAPTCHA-Free Proof-of-Work Protection

🤖 LLM Red Team Automation

🕵️ Multi-provider OSINT

🌐 Global Internet Monitoring

📡 Packet Analysis

⚡ Threat Intelligence

A deception platform designed to impersonate real services, tarpit attackers, record every interaction, and produce actionable threat intelligence.

A modern proof-of-work framework for PHP and WordPress.

✔ No CAPTCHA

✔ No JavaScript fingerprinting

✔ No third-party services

✔ Adaptive SHA-256 puzzles

A complete OWASP GenAI Top 10 red-teaming platform supporting multiple AI providers, automated jailbreak testing, mutation engines, PromptFoo imports, and synthetic attack generation.

Worldwide censorship, internet outage, and connectivity monitoring powered by multiple public data sources.

Open-source OSINT platform featuring

• Username Enumeration

• Face Correlation

• Breach Intelligence

• Metadata Extraction

• Multi-provider Searching

High-interaction deception platform that impersonates real services, wastes attacker time, and records everything for later analysis.

CAPTCHA-free Proof-of-Work protection for PHP and WordPress using adaptive SHA-256 puzzles.

An open-source AI security platform for evaluating Large Language Models against the OWASP GenAI Top 10. Vexor automates prompt injection testing, jailbreak discovery, adversarial prompt generation, and security assessments across multiple AI providers, with support for local and cloud-hosted models.

A global Internet observability platform that monitors outages, censorship events, and network disruptions using multiple independent data sources. Built to provide researchers, journalists, and defenders with a unified view of Internet health and accessibility through real-time dashboards and historical analysis.

Multi-provider OSINT toolkit for username enumeration, breach intelligence, metadata extraction, and avatar correlation.

Security-first Markdown blogging platform with CSP, IPFS support, static publishing, and self-hosted deployment.

Security-focused blogging platform.

• SQL-Free
• Markdown
• Static Publishing
• IPFS Support
• Built-in Security Headers
• CSP
• Automatic Sitemap
• Lightweight
• Self Hosted

Observe before blocking.

Collect intelligence before responding.

Automate repetitive tasks.

Build privacy-first solutions.

Keep everything open source.

Share knowledge.

Improve defender visibility.

Measure everything.

• Expand Drosera into a complete deception framework
• Build enterprise Kibana dashboards
• Continue AI red-team research
• Improve OSINT automation
• Release additional proof-of-work libraries
• Expand internet monitoring capabilities
• Publish technical research
• Contribute to open-source security

Please consider

⭐ Starring the repository

🐛 Reporting bugs

💡 Suggesting features

🔀 Opening pull requests

📢 Sharing the projects

🍯 High-Interaction Honeypots

🔐 Proof-of-Work Anti-Abuse

🤖 AI Red Team Automation

🕵 OSINT Engineering

📡 Threat Intelligence

🌍 Internet Measurement

⚙ Elastic Dashboards

🐳 Docker Infrastructure

• Applied Cryptography
• Threat Hunting
• Threat Intelligence
• Malware Infrastructure
• Internet Censorship
• Honeypots
• AI Safety
• Prompt Injection
• Packet Analysis
• Digital Forensics
• Deception Technology
• Open Source Intelligence

"Good security isn't just blocking attacks. It's understanding them."

"Every attacker interaction is intelligence."

"Open source makes defenders stronger."

• Drosera v1.0
• Full attacker replay system
• Public REST API
• AI-powered IOC enrichment
• Additional Proof-of-Work libraries
• Internet censorship timeline
• Vexor provider expansion
• Improved OSINT modules
• Publish more security research

• High-interaction honeypots
• Service impersonation
• Tarpits
• Credential harvesting analysis
• Attacker behavior analytics

• Proof-of-Work
• Signed cookies
• Adaptive difficulty
• Anti-abuse systems
• Authentication research

• Prompt Injection
• Jailbreak Testing
• OWASP GenAI Top 10
• Agent Security
• Model Evaluation
• Synthetic Attack Generation

• IOC Collection
• Behavioral Analysis
• Threat Hunting
• Elastic Dashboards
• OSINT Correlation

I believe defenders deserve high-quality tooling.

Everything I build is designed around

• Transparency
• Privacy
• Documentation
• Self-hosting
• Community contributions

Found a bug?

Have an idea?

Want to help?

Contributions are always welcome.

git clone https://github.com/AfterPacket/<repository>.git

cd repository

git checkout -b feature/my-feature

git commit

git push

Open Pull Request 🚀

If my projects have helped you or your organization, consider supporting continued development.

🐧 Linux Enthusiast

🍯 Loves Honeypots

🔐 CAPTCHA Hater

🕵 OSINT Addict

🤖 AI Security Nerd

🌎 Open Source Advocate

☕ Powered by Coffee

🎵 Usually Coding With Music

"Every attacker interaction is an opportunity to learn."