> For the complete documentation index, see [llms.txt](https://0xsec.gitbook.io/0xsec/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xsec.gitbook.io/0xsec/about.md).

# About Me

I’m basically another cybersec guy who loves taking things apart to see how they work. I spend my time playing (CTFs), reversing malwares, and hunting for bugs in websites to help keep them safe. If it's made of code, I probably want to break it open and learn from it.

<figure><img src="https://704281641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHmcGF1MgN1IYT3jBclZr%2Fuploads%2Fgit-blob-facd0d6e6768e0563508f9f0752c528484df1167%2Fpfp.jpeg?alt=media" alt="" width="368"><figcaption></figcaption></figure>

### Projects

#### Mirage

Mirage is a modular dynamic binary instrumentation framework designed to defeat anti-debugging techniques employed by malware. Unlike traditional debuggers that rely solely on API hooking, Mirage implements process injection, API interception (MinHook), and direct memory manipulation (PEB patching). The tool allows researchers to attach standard debuggers (e.g. x64dbg) to hostile applications without triggering anti-debug mechanisms such as IsDebuggerPresent, CheckRemoteDebuggerPresent, Kernel Debugger Check and direct PEB flag checks.

Github: <https://github.com/0xSec1/Mirage>

#### VoidWalker

VoidWalker is a Python-based orchestration tool designed to transform standard, detectable KVM virtual machines into "Bare Metal" decoys. By manipulating the hypervisor's hardware abstraction layer, VoidWalker bypasses advanced anti-VM evasion techniques used by malware authors.

Github: <https://github.com/0xSec1/VoidWalker>

### Let's Connect

Github: <https://github.com/0xSec1>\
Twitter: <https://x.com/xeroxsec>