I'm a security practitioner from Indonesia who enjoys tinkering with small tools and sharing them in the open. I'm still learning every day, breaking things more often than fixing them, and grateful when something I build turns out useful to someone else.
- 🔭 I'm currently working on AI-assisted SOC skills & detection tooling
- 🌱 I'm currently learning agentic automation and cloud security
- 👯 I'm always happy to collaborate on open-source security projects
- 💬 Ask me about DFIR, threat hunting, OSINT, and SIEM detection
- 🤝 I help out around @secuity-life-org
- ⚡ Fun fact: I name most of my tools after whatever made me laugh that day
A few projects the community has kindly starred (★) — thank you 🙏
| Project | What it does | Stack | Stars |
|---|---|---|---|
| Claude-Code-CyberSecurity-Skill | 15 Claude Code Skills covering offensive security, defense, RE, threat hunting & CSOC automation | Python |
 |
| CrotDalam | Keyless TikTok OSINT — Playwright scraping with scam/phishing risk heuristics (EN/ID) | Python |
 |
| FuFuFaFa | Unified Flaw & Fault Auditing — an AWS cloud security audit framework | Python |
 |
| MacFIRE | macOS forensic acquisition, timeline analysis & rootkit detection | Python |
 |
| uclsoc_code | A CSOC use-case library — SIEM detection rules mapped to MITRE ATT&CK | YAML |
 |
| FlatScan | Static malicious-file scanner — strings/IOC extraction & scoring (text/JSON/PDF) | Go |
 |
| ExpertXSS | XSS scanner with auto-updating dynamic payloads | Python |
 |
| Kalitellingence | Turns a fresh Kali install into a threat-intel workstation | Shell |
 |
| IOC_Radar_X | Real-time IOC extraction & analysis from X.com | Python |
 |
| StealerKiller | Infostealer detection & removal for endpoints | Python |
 |
🗂️ Everything else — the full toolbox by domain
🤖 AI & Agentic Security
- Claude-Code-CyberSecurity-Skill — 15 Claude Code security skills
- X-n8-Exnate — Agentic SOC playbooks bridging n8n + XSOAR (250+ use cases)
- Asu-SOAR — A SOAR platform experiment
- semar — Multi-agent evaluation for risk, config & AI security
- Octopus-Ai — AI helper for security workflows
- gemini-security-skills — Gemini-based security skills
🎯 Offensive & Recon
- ExpertXSS — XSS scanner with dynamic payloads
- Makassarscan — All-in-one recon toolkit
- Bucin — External reconnaissance toolkit
- Aegis — Single-file URL recon & OSINT enrichment web app
🛡️ Detection, DFIR & Response
- MacFIRE — macOS forensic investigation & response engine
- WinFire — Windows incident response engine
- FlatScan — Static malicious-file scanner (Go)
- StealerKiller — Infostealer detection & removal
- Ransomeye — Ransomware detection tooling
- uclsoc_code — CSOC use-case library (MITRE ATT&CK)
- DevoSIEM_UCL — Devo SIEM use cases + response playbooks
- Qradar-SIEM-Auditor — QRadar SIEM audit tooling
- OpenBOM — Supply-chain threat detection for Linux
🔎 OSINT & Threat Intelligence
- CrotDalam — Keyless TikTok OSINT with risk heuristics
- IOC_Radar_X — Real-time IOC extraction from X.com
- URL_Request_bot — Telegram URL bot for ULP logs
- Kalitellingence — Kali → threat-intel workstation
- CTI-Product-Assesment-Matrix — Enterprise CTI platform matrix
- Obscura-Threat-Investigation — Threat investigation notes
☁️ Cloud & Secret Scanning
- FuFuFaFa — AWS cloud security audit framework
- No-Secret-Scan- — Detect hardcoded secrets in web pages
- No-Secret-Scan-Github-Gitlab — Scan repos for exposed keys across history
🧪 Research & Utilities
- FedChecks — Fedora post-install + health-check reporter
- samnayiransomware — Ransomware behavior simulation (research)
- Jomok — Research & education project
- security-life.Hacktools — Misc security utilities
Auto-updated from Medium & Blogspot.
If a tool of mine ever saved you some time, a coffee is always appreciated — no pressure at all 🙂
Made with curiosity, for blue, purple & red teams — and everyone still learning 💙