Available for Remote Security Roles & Assessments

Defensive Security Engineer &
Active Protocol Defense Researcher

I don't just build passive dashboards. I engineer active defensive engines, attack-path graph algorithms, protocol-level proxies, and socket-level verification systems that solve security weaknesses on the wire.

Explore Flagship: FallLine v3 Browse All 9 Projects GitHub Profile
69 / 69 Automated Unit Tests Passing
9 Projects Active Cyber & SaaS Systems
100% Socket-Level Re-Scan Verification
MITRE ATT&CK Integrated Tactic Mapping
Flagship Platform

FallLine v3.0.0 — Attack-Path & Verification Platform

A defensive vulnerability assessment and attack-path analysis engine that models systems as a domino run, calculates real Time-to-Compromise (TTC), ranks choke-point fixes, and verifies remediations by re-scanning only the fixed port.

FallLine Live Dashboard on Metasploitable 3
Live Scan against Metasploitable 3 (192.168.56.103) Port 21: Verified Fixed
FallLine Emblem

FallLine Engine

Graph-Theoretic Attack Modeling & Real Re-Probe Loop

Shortest-Path Attack Modeling

Uses NetworkX and Dijkstra's algorithm to compute the cheapest attacker path from entry to sensitive data, computing realistic Time-to-Compromise (TTC).

Threat Intelligence Enrichment

Scales attacker effort dynamically using real-time CISA Known Exploited Vulnerabilities (KEV) and FIRST EPSS exploit prediction metrics.

Socket-Level Fix Verification

Never trusts a marked ticket. Sends a targeted TCP socket probe to re-verify the weakness is dead before awarding the green Verified Fixed status.

Safety-by-Design & Cryptographic Proof

Enforces strict scope allowlists and requires cryptographic HTTP token or DNS TXT proof before permitting scans against public IP targets.

Python 3.11+ FastAPI NetworkX Nmap / Naabu / HTTPX SARIF 2.1.0 MITRE ATT&CK v14
View on GitHub (hardex001-tech/FallLine)
Portfolio Inventory

Engineered Cyber Systems & Software

Explore my complete library of defensive protocol engines, active deception traps, AI auditors, and production platforms.

Live Demonstration

Interactive Defense Terminal

Test simulated commands in the interactive browser console. Type help, fallline, s3-shield, or scan.

kali@Hardexploit: ~/FallLine (zsh) ONLINE
kali@Hardexploit:~$
Technical Matrix

Core Competencies & Lab Architecture

Battle-tested methodologies and tooling applied across active virtualized lab environments and cloud infrastructure.

🎯

Offensive & Assessment

  • Port & Service Recon: Nmap (-sV, NSE), Naabu, ProjectDiscovery HTTPX
  • Web Application Security: Nuclei (safe exposure templates), Burp Suite, SSRF research
  • Exploitation Frameworks: Metasploit Framework, Hydra, custom Python socket exploits
  • Vulnerability Research: CISA KEV weaponization, FIRST EPSS scoring, OWASP Top 10
🛡️

Defensive Engineering

  • Graph Modeling: NetworkX Dijkstra shortest-path algorithms for TTC modeling
  • Socket Verification: Targeted Python socket re-probing, state-machine confirmation
  • Host & Network Defense: Linux UFW, iptables, systemd daemon hardening, sshd_config
  • Active Deception: Honeytokens, breadcrumb poisoning, tar-pit rate-limiting
☁️

Cloud & Architecture

  • AWS Cloud Auditing: Security Groups, S3 Block Public Access, IAM Root MFA via read-only proxies
  • Standards Compliance: MITRE ATT&CK v14 enterprise tactic mapping, SARIF 2.1.0 exports
  • Virtualization Lab: Kali Linux (Hardexploit), VirtualBox host-only networks, Metasploitable 3
  • Backend Engineering: Python (FastAPI, Uvicorn, Pydantic), SQLite, AsyncIO
Get in Touch

Ready to Fortify Your Infrastructure

I am actively seeking remote cybersecurity opportunities (Vulnerability Management, Security Operations, Junior Penetration Testing) and freelance infrastructure security assessments.

GitHub github.com/hardex001-tech
Flagship Project github.com/hardex001-tech/FallLine
Direct Contact