OPEN SOURCE · SECURITY RESEARCH

Security Tools
Built in Public

I build open-source cybersecurity tools — attack visualizers, AI phishing detectors,
honeypots, OSINT scrapers, and more. Everything is free and self-hostable.

⭐ GitHub Profile View Projects →
13
OPEN SOURCE TOOLS
5
LANGUAGES SPOKEN
MIT
LICENSE — FREE FOREVER
100%
SELF-HOSTABLE
// LIVE DEMOS

Try Them Live

Real, working demos running right here in your browser — no install, no signup

LIVE ▶ Fullscreen
🌍
WebSocket FastAPI
SHADOWMAP
Real-time global cyberattack visualization. Animated bezier arcs on a world map showing live SSH/RDP/web attacks from your honeypot. One-command Docker deploy.
▶ Live Demo Source
LIVE ▶ Fullscreen
💥
No API key Offline
CRACKVIS
Type a password — watch it get attacked in real time. Character entropy heatmap, 4-phase crack simulation (dictionary → leet → mask → brute), and crack time estimates for Phone / RTX 4090 / GPU cluster / nation-state.
▶ Live Demo Source
// FEATURED

Flagship Projects

Production-quality tools with full documentation and Docker support

🧠
AI-POWERED Claude
PHANTASM
Paste any suspicious email or message — AI detects URGENCY, AUTHORITY, FEAR, IMPERSONATION tactics and color-highlights every manipulative phrase with a psychological breakdown.
→ github.com/nadirzhon/phantasm Python · React · Anthropic API
📋
OSINT CLI
DOSSIER
One command → full intelligence report. WHOIS, DNS, subdomains, SSL, security headers, GeoIP, email security (SPF/DKIM/DMARC). Self-contained HTML output. No API key required for basic scan.
→ github.com/nadirzhon/dossier Python · FastAPI · crt.sh
🍯
Paramiko Telegram
SSH HONEYPOT
Realistic SSH server that logs every credential attempt, geolocates attackers, sends Telegram alerts, and maintains a fake shell to capture post-auth commands. Feeds data directly into SHADOWMAP.
→ github.com/nadirzhon/ssh-honeypot Python · Paramiko · SQLite
📊
Blue Team Real-time
MINI-SIEM
Lightweight SIEM that tails SSH, nginx, and Apache logs in real time. Detects brute force, SQLi/XSS patterns, scanner user agents, directory traversal. Configurable thresholds. JSON alert output.
→ github.com/nadirzhon/log-analyzer-siem Python · Regex · Colorama
// MORE TOOLS
🔍 Port ScannerPython
Multithreaded TCP/UDP scanner with service fingerprinting, banner grabbing, and JSON reports. CIDR range support.
🕵️ OSINT AggregatorPython
Shodan, VirusTotal, WHOIS, DNS, crt.sh subdomains — all in one CLI. Generates structured JSON reports.
🕸️ Web Vuln ScannerOWASP
SQLi, XSS, open redirect, sensitive file exposure, security header audit. Crawl mode for full site testing.
🔑 JWT AnalyzerPython
alg:none bypass, weak secret cracking, RS256→HS256 confusion, token forging. Full JWT security audit CLI.
🎣 Phishing DetectorML
Random Forest classifier, 96% accuracy. Shannon entropy, brand keyword detection, suspicious TLD heuristics.
🔐 Password AuditorPython
Hash cracker (MD5/SHA1/bcrypt), NIST policy analyzer, leet-speak mutation engine, HaveIBeenPwned check.
📡 Network DetectorScapy
Real-time ARP spoofing, port scan, DNS tunneling, ICMP flood detection via live packet capture.
🏴 CTF WriteupsHTB/THM
HackTheBox and TryHackMe writeups with PoC code. Reverse shell generator, LFI scanner, reusable tools.
// BEYOND SECURITY

Other Work

Same engineering, applied to client web projects — design, animation, and front-end build from scratch

LIVE SITE ▶ Visit
// WEB DEVELOPMENT
SORA SUSHI 空
Premium landing for a sushi café & delivery service. Three.js particle hero, GSAP scroll animations, filterable live menu, and a multi-step order form — fully responsive, hand-built with no page builder.
Stack: Vanilla JS · Three.js · GSAP Type: Client landing
▶ Live Site
// ABOUT

Background

Self-taught developer and security researcher. I build tools that make security concepts tangible — things you can run, break, and learn from. Everything I publish is open-source and self-hostable.

Currently focused on penetration testing tooling, AI-augmented security analysis, and infrastructure automation. Working toward eJPT → OSCP. Active on HackTheBox and TryHackMe.

Languages: Kyrgyz · Russian · Uzbek · Tajik · English

SKILL LEVELS
Backend Engineering90%
Network Analysis78%
Offensive Security70%
AI / ML Systems65%
Infrastructure75%
// CONTACT

Get in Touch

Open to freelance projects, security consulting, and collaborations

⚡
GITHUB
github.com/nadirzhon
💼
FREELANCE
Available on Kwork
🏴
CTF PROFILE
HTB / TryHackMe