Sujal (ne0k1ra / neokira) — Offensive Security Automation Engineer Portfolio

NE0K1RA Sujal · ne0k1ra / neokira
Hover to Reveal  ◎
Sujal (ne0k1ra / neokira) as a samurai warrior wearing a black menpō mask
Open to red-team roles · 2026
· MANIFESTO SO… WHY WILL YOU TRUST MY TOOLS?

What wired me in.

I was drawn to a world where systems have cracks — where logic has seams that can be pulled apart. That's what pulled me into offensive security. Not to break things. To understand them completely.

ne0k1ra · 2026

The shell will drop. The stack will not lie. Automate anyway.

Every system has a surface. Every surface has a seam. Every seam has an angle. Find it before they do.

— ne0k1ra · operator doctrine
· IDENTITY NE0K1RA · 001

I AM STILL IN THE NETWORK.

Offensive security engineer. Runs on caffeine and root access. Survived enough CTFs to stop counting, mastered the art of building tools that operators actually want to run.

I build toolchains the way exploits get written — modular, obsessive, with no wasted surface. GRIMOIRE, WRAITH-NET, LightScan, KIRA. Each one solves a real problem in a real engagement pipeline.

· · BY THE NUMBERS TALLIED SO FAR

By the numbers

· DOMAINS · THREE VECTORS · THREE MASKS

Expertise Domains — Recon & OSINT, Payload & Evasion, Infrastructure & C2

Anubis — representing the Egyptian threat vectors. Statue of Liberty — representing the US threat vectors. A red kangaroo — representing the Australian threat vectors.
CHAPTER · ONE

RECON & OSINT PHASE 01 · WHERE EVERY ENGAGEMENT STARTS

Attack surface intelligence, passive recon, asset mapping. The first move is always silence. Every target tells a story before you even touch it.

CHAPTER · TWO

PAYLOAD & EVASION PHASE 02 · WHERE CODE BECOMES A WEAPON

Polymorphic payloads, EDR bypass, GRIMOIRE's engine. Precision over brute force. Every payload is custom — tailored to the target stack.

CHAPTER · THREE

INFRASTRUCTURE & C2 PHASE 03 · WHERE SESSIONS SURVIVE

Encrypted mesh C2, KIRA-hardened deployment, async beaconing. Built to last. The infrastructure outlives the engagement.

Arsenal — four tools, one operator pipeline

· ARSENAL · FOUR TOOLS · ONE KILL CHAIN
Sumi-e illustration of a nine-tailed kitsune spirit.
智 Chi · WRAITH-NET

Map the unknown.

Passive intelligence collection. Subdomain discovery, risk-scoring, threat exposure mapping.

Hardened Arch Linux installer. LUKS2 encryption, LVM, secure defaults — operator-ready in one script.

九 Kyū · KIRA

Deploy the environment.

霊 Rei · LIGHTSCAN

Illuminate the surface.

Async service enumeration. TCP/UDP scanning, DNS zone transfer, CVE correlation engine.

Modular C2. Payload generation, pivot chain visualization, encrypted comms, TUI operator console.

神 Shin · GRIMOIRE

Forge the payload.

Kill Chain — four phases of offensive engagement

· PHASE · KILL CHAIN · FOUR PHASES
Close-up of an eye, reflecting website interfaces drifting across the iris.
映 PHASE 01 · RECON

External attack surface.

Global assets · OSINT · Passive & active recon — WRAITH-NET + LightScan.

EDR/AV bypass · Polymutation engine · GRIMOIRE payload module.

観 PHASE 02 · WEAPONIZE

Payload generation.

蔵 PHASE 03 · EXPLOIT

Initial access.

0-day & N-day vectors · Shell: SYSTEM / ROOT · Privilege escalation.

Async beaconing · Encrypted mesh C2 · Long-term foothold.

創 PHASE 04 · PERSIST

Command & control.

· CATALOG · ACTIVE REPOSITORIES & TOOLSETS

Active Tool Catalog

grimoire

Golang

A modular, TUI-driven post-exploitation and recon suite with a Death Note aesthetic.

#c2 #tui

hashit

Rust

Zero-friction file sharing. Drop a file, get a secure download link.

#file-share #crypto

kira-installer

Bash

Hardened Arch Linux installation script with LUKS2 encryption and secure system defaults.

#arch-linux #hardening

LightScan

Golang

High-performance, asynchronous network scanner and surface enumeration framework.

#scanner #recon

ne0suite

Golang

A centralized dispatcher and C2 gateway routing subcommands to modular security tools.

#c2-dispatch #gateway

pico

Rust

Lightweight utility to wrap and package any web application into a native desktop container.

#webview #native-app

shadowci

Python

Static analysis and secret-leak scanner designed for high-performance CI/CD pipelines.

#devsecops #secret-scanner

sigil

C++

Static PE/ELF binary analysis parser and file-integrity scanner for security research.

#binary-parsing #anti-cheat

wraith-net

Golang

Passive OSINT scraping, subdomain discovery, and threat intelligence correlation tool.

#osint #threat-intel

akame

Rust

Lightweight post-exploitation C2 teamserver and implant client with mTLS session communication.

#c2-framework #implant

hrig

Python/C

Host Runtime Integrity Governance system with measured boot attestation, Merkle proofs, and live memory diffing.

#attestation #integrity

purepic

JS/Electron

Privacy tool to strip tracking coordinates, EXIF data, and hardware metadata from image files client-side.

#exif-stripper #privacy

hashwraith

Python

High-speed cryptographic hash identification, pattern analysis, and payload metadata parser.

#crypto-id #hash-parser

ne0c2

Golang

Custom command & control framework with encrypted beacons, operator tasking, and fileless execution.

#c2-framework #fileless-exec

ne0root

C/LKM

Modern Linux LKM rootkit utilizing ftrace syscall and LSM hook overwrites for kernel-level stealth and persistence.

#rootkit #kernel-lkm

LightOS

C++/Hyprland

Gothic anime Hyprland desktop OS for Arch Linux — Death Note themed with Misa Amane aesthetic and custom widgets.

#arch-linux #hyprland

LightOS-Launcher

C++/GTK3

GTK3 edge launcher with application indexing, emoji/GIF search, file discovery, and wallpaper selection.

#gtk3 #launcher

LightOS-Settings

C/GTK4

GTK4 settings application for LightOS providing system diagnostics, appearance controls, and desktop utilities.

#gtk4 #settings

LightOS-Workspace

C++/GTK3

GTK3 Hyprland workspace switcher with Death Note spine layout, wallpaper glow effects, and dynamic artwork sets.

#workspace #wayland

LightOS-Widgets

C++/GTK3

Ambient desktop clock widget and audio spectrum visualizer driven by wallpaper color extraction.

#widgets #cava

LightOS-Updater

Shell

Arch Linux update helper providing diff previews of pending upstream packages before executing system upgrades.

#arch-linux #pacman

LightOS-Welcome

C/GTK4

GTK4 first-run onboarding screen with quick links to desktop setup, configuration manuals, and shortcuts.

#gtk4 #onboarding

LightOS-Installer

Shell

Automated bootstrap script for cloning, compiling, and configuring the LightOS desktop layer on Arch Linux.

#bootstrap #automation

LightOS-Assets

Python

Gothic anime artwork, vector iconography, wallpapers, and terminal ASCII banners for the LightOS ecosystem.

#artwork #wallpapers

LightOS-Downloader

C++/Qt6

Desktop download utility with real-time transfer telemetry, retry logic, and atomic temporary-file writes.

#qt6 #networking

Secure your infrastructure

Secure your infrastructure before adversaries map it.
· · CONTACT REACH OUT

INITIATE SECURE
CHANNEL

I provide bespoke offensive security automation and advanced threat simulation. No sales calls — just operator-to-operator.

TERMINAL: CHANNEL_CONNECT
● ONLINE // ACTIVE
Sujal (ne0k1ra / neokira) © 2026 SUJAL (NE0K1RA / NEOKIRA) · OPERATOR PORTFOLIO