Tristan J. Pereira

On-device (Apple Silicon / MLX) pipeline for building cyber-security instruction data and fine-tuning local LLMs on it — the code behind the paper above.

Gradio chat GUI for local models on Apple Silicon, with interchangeable MLX, GGUF (llama.cpp) and MLX-VLM vision backends, streaming, and a live token meter.

A strict, retrieval-only MCP server — search, fetch, chunk, embed and vector-search over Chroma — that hands a local model grounded context without embedding an LLM itself.

Stealth-oriented port scanner for authorized red-team work: multiple scan techniques and evasion features tuned to minimize operational footprint.

Multi-modal Oracle database attack tool — privilege enumeration, sensitive-data discovery, credential spraying and direct query execution for assessments.

High-performance, concurrent Argon2id hash cracker with multi-core CPU and OpenCL GPU acceleration, for password recovery and red-team use.

Host and network defense scanner built around OPSEC heuristics — inventories the system, analyzes configuration, inspects processes and logs, and flags weak posture.

Defensive pre-publish check for a Linux binary: hashes and metadata, optional ClamAV/YARA, and a Firejail-sandboxed run that traces network syscalls against expected egress.

Plugin-based file-analysis tool that scans code and data at scale to flag security issues, extract API endpoints, and surface sensitive information — safe by design and easy to extend.

OSINT / red-team helper for the Censys Platform API v3 — direct CenQL queries, preset enumeration, strict target scoping, and JSON/CSV reporting. (The blog post's hunts, as a tool.)

Threaded certificate-transparency subdomain enumerator over crt.sh, with a keyword-expansion mode that surfaces dev/staging/admin/api hosts a plain query misses.

Plugin-driven pattern scanner that walks files recursively to extract secrets, endpoints and web artifacts into reports, with an optional AI mode that drafts a risk report from the findings.

Searches GitHub across code, issues, PRs and commits for keywords or regex, printing matches with surrounding context — built for finding leaked secrets across an org.

Fast code search across terabytes — file names, directory names and contents — with regex support and progress reporting.

XChaCha20-Poly1305 encryption (scrypt-derived key) that hides ciphertext inside something ordinary-looking — an IP list, a JWT, a Jupyter notebook, a JPEG, or a tar.

Compiles a Python script into a single standalone binary with Nuitka, wrapping the flags worth having: onefile, clang + LTO, import pruning, and optional obfuscation and UPX compression.

Tiny Rust tool that ptrace-attaches to a running Linux process and blocks SIGTERM in every thread — handy for keeping a process alive while you investigate it.