Sujal (ne0k1ra / neokira) — Offensive Security Automation Engineer Portfolio

NE0K1RA Sujal · ne0k1ra / neokira
Hover to Reveal  ◎
Sujal (ne0k1ra / neokira) as a samurai warrior wearing a black menpō mask
Open to red-team roles · 2026
· MANIFESTO SO… WHY WILL YOU TRUST MY TOOLS?

What wired me in.

I was drawn to a world where systems have cracks — where logic has seams that can be pulled apart. That's what pulled me into offensive security. Not to break things. To understand them completely.

ne0k1ra · 2026

The shell will drop. The stack will not lie. Automate anyway.

Every system has a surface. Every surface has a seam. Every seam has an angle. Find it before they do.

— ne0k1ra · operator doctrine
· IDENTITY NE0K1RA · 001

I AM STILL IN THE NETWORK.

Offensive security engineer. Runs on caffeine and root access. Survived enough CTFs to stop counting, mastered the art of building tools that operators actually want to run.

I build toolchains the way exploits get written — modular, obsessive, with no wasted surface. GRIMOIRE, WRAITH-NET, LightScan, KIRA. Each one solves a real problem in a real engagement pipeline.

· · BY THE NUMBERS TALLIED SO FAR

By the numbers

· DOMAINS · THREE VECTORS · THREE MASKS

Expertise Domains — Recon & OSINT, Payload & Evasion, Infrastructure & C2

Anubis — representing the Egyptian threat vectors. Statue of Liberty — representing the US threat vectors. A red kangaroo — representing the Australian threat vectors.
CHAPTER · ONE

RECON & OSINT PHASE 01 · WHERE EVERY ENGAGEMENT STARTS

Attack surface intelligence, passive recon, asset mapping. The first move is always silence. Every target tells a story before you even touch it.

CHAPTER · TWO

PAYLOAD & EVASION PHASE 02 · WHERE CODE BECOMES A WEAPON

Polymorphic payloads, EDR bypass, GRIMOIRE's engine. Precision over brute force. Every payload is custom — tailored to the target stack.

CHAPTER · THREE

INFRASTRUCTURE & C2 PHASE 03 · WHERE SESSIONS SURVIVE

Encrypted mesh C2, KIRA-hardened deployment, async beaconing. Built to last. The infrastructure outlives the engagement.

Arsenal — four tools, one operator pipeline

· ARSENAL · FOUR TOOLS · ONE KILL CHAIN
Sumi-e illustration of a nine-tailed kitsune spirit.
智 Chi · WRAITH-NET

Map the unknown.

Passive intelligence collection. Subdomain discovery, risk-scoring, threat exposure mapping.

Hardened Arch Linux installer. LUKS2 encryption, LVM, secure defaults — operator-ready in one script.

九 Kyū · KIRA

Deploy the environment.

霊 Rei · LIGHTSCAN

Illuminate the surface.

Async service enumeration. TCP/UDP scanning, DNS zone transfer, CVE correlation engine.

Modular C2. Payload generation, pivot chain visualization, encrypted comms, TUI operator console.

神 Shin · GRIMOIRE

Forge the payload.

Kill Chain — four phases of offensive engagement

· PHASE · KILL CHAIN · FOUR PHASES
Close-up of an eye, reflecting website interfaces drifting across the iris.
映 PHASE 01 · RECON

External attack surface.

Global assets · OSINT · Passive & active recon — WRAITH-NET + LightScan.

EDR/AV bypass · Polymutation engine · GRIMOIRE payload module.

観 PHASE 02 · WEAPONIZE

Payload generation.

蔵 PHASE 03 · EXPLOIT

Initial access.

0-day & N-day vectors · Shell: SYSTEM / ROOT · Privilege escalation.

Async beaconing · Encrypted mesh C2 · Long-term foothold.

創 PHASE 04 · PERSIST

Command & control.

· CATALOG · ACTIVE REPOSITORIES & TOOLSETS

Active Tool Catalog

grimoire

Golang

A modular, TUI-driven post-exploitation and recon suite with a Death Note aesthetic.

#c2 #tui

hashit

Rust

Zero-friction file sharing. Drop a file, get a secure download link.

#file-share #crypto

kira-installer

Bash

Hardened Arch Linux installation script with LUKS2 encryption and secure system defaults.

#arch-linux #hardening

LightScan

Golang

High-performance, asynchronous network scanner and surface enumeration framework.

#scanner #recon

ne0suite

Golang

A centralized dispatcher and C2 gateway routing subcommands to modular security tools.

#c2-dispatch #gateway

pico

Rust

Lightweight utility to wrap and package any web application into a native desktop container.

#webview #native-app

shadowci

Python

Static analysis and secret-leak scanner designed for high-performance CI/CD pipelines.

#devsecops #secret-scanner

sigil

C++

Static PE/ELF binary analysis parser and file-integrity scanner for security research.

#binary-parsing #anti-cheat

wraith-net

Golang

Passive OSINT scraping, subdomain discovery, and threat intelligence correlation tool.

#osint #threat-intel

akame

Rust

Lightweight post-exploitation C2 teamserver and implant client with mTLS session communication.

#c2-framework #implant

hrig

Python/C

Host Runtime Integrity Governance system with measured boot attestation, Merkle proofs, and live memory diffing.

#attestation #integrity

purepic

JS/Electron

Privacy tool to strip tracking coordinates, EXIF data, and hardware metadata from image files client-side.

#exif-stripper #privacy

hashwraith

Python

High-speed cryptographic hash identification, pattern analysis, and payload metadata parser.

#crypto-id #hash-parser

Secure your infrastructure

Secure your infrastructure before adversaries map it.
· · CONTACT REACH OUT

INITIATE SECURE
CHANNEL

I provide bespoke offensive security automation and advanced threat simulation. No sales calls — just operator-to-operator.

TERMINAL: CHANNEL_CONNECT
● ONLINE // ACTIVE
Sujal (ne0k1ra / neokira) © 2026 SUJAL (NE0K1RA / NEOKIRA) · OPERATOR PORTFOLIO