[~] $ ls ./projects

// Tools and research I build while learning malware analysis, reverse engineering and threat intelligence.

❯ TorScraper

Go

A Cyber Threat Intelligence tool that automates data collection from .onion services, routing all traffic anonymously through the Tor network. It captures full-page screenshots, backs up raw HTML for offline analysis, and scans multiple targets concurrently using a worker-pool pattern.

GolangTor / SOCKS5chromedpCTIYAML targets
Source

❯ go-web-scraper

Go

A simple cross-platform CLI web scraper written in Go. It downloads and stores page HTML, extracts links to a text file, and takes a full-page screenshot using a real Chromium-based browser via chromedp — with automatic browser discovery across operating systems.

GolangchromedpCLIScreenshots
Source

❯ BlossCraft Analysis

Report

A full technical analysis of BlossCraft, an Electron-based infostealer disguised as a fake game launcher. Covers the NSIS installer, the encrypted app.asar JavaScript payload (AES-256-GCM + XOR), Discord & browser credential theft, and the Python second-stage stealer — complete with YARA rules and MITRE ATT&CK mapping.

Malware AnalysisReverse EngineeringElectronYARAMITRE ATT&CK
Repository Read write-up →