// Projects
What We’ve Built
Wheatley
ESP32 RF Surveillance Detection Node
A passive Wi-Fi sniffing system built inside a custom Wheatley (Portal 2) shell. Operates as a high-performance asynchronous dual-core sniffer: intercepting 802.11 radio packets across all 13 channels and pushing analyzed metadata to an MQTT broker on a local Raspberry Pi. Functions as a room-level RF camera: if someone is standing at your window with an RF-emitting device, Wheatley sees it.
// Show Technical Detail
- RF Scanning + Channel Hopping: Core 0 runs a continuous sniffer task rotating through 13 Wi-Fi channels every 250ms, intercepting raw 802.11 frames invisible to standard clients.
- Intelligent Packet Inspection: Promiscuous callback extracts MAC addresses, frame subtypes, and sequence numbers from intercepted frames.
- Device Fingerprinting: First three bytes of each MAC matched against an internal OUI database: identifies manufacturer (Apple, Samsung, Intel, etc.) on sight.
- SSID + Probe Parsing: Dives into packet payload to extract SSID probe requests: mapping which networks nearby devices have previously connected to.
- Signal Analytics: Calculates avg, min, and max RSSI per detected device to estimate physical proximity to the node.
- MQTT Diplomat: Core 1 periodically pauses sniffing to push two JSON streams to the Pi: a Heartbeat (CPU/uptime) and a Data Pulse (top 20 most active nearby devices).
- Thread Safety: Mutex lock prevents race conditions between cores: no crashes when Core 1 is writing while Core 0 is deleting stale entries.
NULL-BEACON
Phantom Device Generator: BT/WiFi MAC Rotation
Credit card sized device that actively rotates spoofed Bluetooth and Wi-Fi MAC addresses around you, creating a crowd of phantom devices. Any passive logging or tracking system in range sees dozens of ghost nodes instead of your real hardware: making individual identification significantly harder in surveilled environments.
SIGIL-CRYPT
Post-Quantum Cryptographic Engine: Module-LWE / AES-256-GCM / NIST L5
A fully offline, browser-native post-quantum encryption engine built in tribute to Luci4. Implements Module-LWE (k=4, n=256, q=12289) with NTT acceleration, PBKDF2 at 600,000 rounds, and AES-256-GCM authenticated encryption. Achieves NIST Level 5 security: the highest post-quantum classification. No server. No keys leave your machine. No seed ever persisted. The sigil visualizations, public key matrix and error field, render the lattice as it forms, drawn live from the cryptographic state. Built as a cryptographic ritual. Built for him.
// Show Technical Detail
- Module-LWE Lattice: k=4 module rank over polynomial ring Z_q[x]/(x^256+1). Public key matrix A expanded via HKDF-SHA256 with full domain separation, no splitmix, no shortcuts.
- NTT Acceleration: Number Theoretic Transform over q=12289 using Cooley-Tukey forward and Gentleman-Sande inverse. Same zeta table traversed in both directions.
- PBKDF2 · 600K Rounds: Every typed seed is hardened through 600,000 rounds of PBKDF2-SHA256 before touching any cryptographic primitive. Entropy seeds skip hardening, they're already 256-bit.
- AES-256-GCM: Symmetric layer uses WebCrypto AES-GCM with a 256-bit key derived from the LWE shared secret. Full authenticated encryption with IND-CCA2 implicit rejection.
- Sigil Visualization: Public key matrix and CBD error field rendered live to canvas as the lattice is forged, each coefficient mapped to color via a structured palette. A visual fingerprint of your key.
- Zero Persistence: Seed is never written to localStorage, sessionStorage, or anywhere. Close the tab and the key is gone. Intentional.
Talisman
Passive RF Camera Detector
A passive RF reader that detects camera RF emissions and vibrates to alert you when one is nearby — a pocket-sized counter-surveillance check.
Project Fennec
Portable Multi-Tool: RF / Hardware Exploitation
A Flipper Zero competitor built to a higher spec and a darker aesthetic. Think WD Black SSD design language: matte black, aggressive, minimal. Combines RF, hardware exploitation, NFC, and IR capabilities in a purpose-built handheld form factor. Hardware design still in the theoretical phase: figuring out the right silicon before committing to a chassis.
NullUSB
Authorized Pentesting: HID Attack Platform
A feature-rich HID attack platform for authorized penetration testing engagements. Expands on the BadUSB concept with a broader toolset: payload delivery, enumeration, and post-exploitation utilities in a single inconspicuous form factor. Intended strictly for use on systems you own or have written authorization to test.
Cerberus
Wireless Pentesting Platform: Cyberpunk 2077: Phantom Liberty
A multi-capability wireless security research tool built on ESP32, themed after Cerberus from Cyberpunk 2077: Phantom Liberty. Built for self-study in offensive wireless security: covers 802.11 reconnaissance, network enumeration, and active pentesting techniques. Controlled via a custom black terminal web interface styled as a Cerberus command console. Physical feedback via NeoPixel LED strip and buzzer with distinct animation states per operational mode. Connects to an MQTT broker for remote command and status relay. Currently inactive: being heavily sanitized for public GitHub release.
NullStrix
Unified Offensive CLI / Continuous Vulnerability Discovery
The ultimatum: technically every NullSec offensive tool folded into one strong CLI. Point it at a URL and it finds rabbit holes — diving down through a target to surface and list every insecurity it finds.
NullNightjar
Classified: Details Pending
Not yet public. Check back.
NullPhantom
Classified: Details Pending
Not yet public. Check back.
NullRaven
Classified: Details Pending
Not yet public. Check back.
Project Odradek
Death Stranding Weather Lamp: ESP32 / Solenoid / 255 RGB LEDs
A functional recreation of the Odradek terrain scanner from Death Stranding: built as an automated weather warning system. Provides 30-minute advance rain alerts via solenoid-actuated mechanical flaps, 255 individually addressable RGB LEDs, motor-synced movement, and harmonically tuned piezo audio accurate to the in-game sound. Dual-core ESP32 handles networking and animations simultaneously. Full web interface styled after the Death Stranding Bridges aesthetic with real-time system monitoring, OTA firmware updates, multi-location weather tracking, and a custom alarm system. Touch gestures for mode switching. Estimated build cost €230–300.
Inertia Creeps
Blackwall Audio Visualizer: WebAudio API / Canvas / Spectral Renderer
A real-time audio visualizer built as a Cyberpunk 2077 Blackwall aesthetic piece. Captures system audio or microphone input and renders it as a living wall of spectral columns, floor particles, and atmospheric glows. Fully pixel-buffer rendered with asymmetric smoothing, beat flash detection, spectral balance analysis, and a custom xorshift-driven noise system. No frameworks. No libraries. Pure WebAudio, Canvas 2D, and typed arrays — optimized to run at 60 FPS on low-end hardware.
NullCut
Local Background Remover
A local-first background removal tool — strips backgrounds out of images without sending anything to a cloud API.
RELIC
Cyberpunk 2077-Inspired Memory Drive
A Cyberpunk 2077-inspired build: a man's memories and personality stored on a USB drive, in the spirit of the game's relic/biochip lore.
NullNexus
Homelab Compute Node: Display + Voice Intelligence
A homelab project with two layers: an ESP32-driven LED display panel showing live cluster health (all nodes up glows light blue, anything down flips red), and a small LLM acting as the semi-conscious mind of the server, fed real-time cluster data so you can ask what's going on across the stack. The original 3D-printed/laser-cut rack is currently offline; the workload now runs on an HP Z440 (22-core / 44-thread Xeon) alongside a Raspberry Pi 4 (4GB). Still solving how to pipe extensive telemetry to the LLM without creating a security surface.
NullOS
Custom Linux Distribution
A Linux distribution built from scratch, combining the security toolset of Kali, the daily drivability of Ubuntu, and a curated set of performance optimizations: including ZRAM and memory management tweaks: into a cohesive, usable system. Several base/desktop variants have been explored along the way (Debian 13 with KDE Plasma, CachyOS, NixOS) as the project searches for its final foundation. Currently in alpha, with kernel-level hardening and deeper privacy infrastructure planned for upcoming builds.
WAPPIE CORE
Client Site — Fashion Brand
Client website for WAPPIE CORE, a fashion brand built to push limits. (Internally codenamed "GrimeTank" during development.)
MASA
Client Site — Skate Brand E-Commerce
E-commerce site for MASA, a localized skate brand based in Leidschendam.
NullSec-Site
This Site
This very site — built in Next.js, with a live series taxonomy, a proximity-blurred hero, and an ambient network graph running underneath all of it.
A.A.I.M
Advanced Artificial Intelligence Memory
A memory architecture for LLMs that compresses old conversations into minimal "memory packets": storing the essence without the bulk. When a past topic resurfaces, the system delves back into the relevant log to reconstruct detail on demand. Designed to give AI systems real conversational continuity without bloating the context window or storing sensitive data in raw form.
BT-7274
AI Agent Core
An AI agent core — essentially a Hermes-based LLM reskinned with BT-7274's (Titanfall) interface and personality.
[REDACTED]
Classified: Details Pending
Not yet public. Check back.