Skip to content
mandoof1Public

About

mandoof — profile

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Latest commit

 

History

108 Commits

Folders and files

Repository files navigation

Hadi Abdulrahman — I build systems that investigate. Cybersecurity engineering student working on honeypots, security models, and AI infrastructure.

Flagship work   /   Research   /   Get in touch

I'm Hadi, a cybersecurity engineering student working where security, machine learning, and systems engineering meet. I build the full path: capture attacker behavior, analyze the evidence, and give an investigator something useful to work with.

Open to cybersecurity internships and entry-level roles. My projects are open source, designed for research and authorized testing, and built to run on infrastructure I control.

Flagship work

HoneySentinel AI. Five-protocol honeypot platform: capture interactions, analyze them with local classifiers and models, then investigate transcripts, ATT&CK techniques, and indicators. Open repository.

HoneySentinel AI captures attacker interactions across SSH, Telnet, FTP, HTTP, and HTTPS and turns them into encrypted evidence. Its investigation workspace brings together session transcripts, ATT&CK mappings, indicators, and exports for downstream tools.

The self-hosted deployment blocks outbound traffic from the honeypot engine and separates ingestion from the API. Wolfram enriches captured transcripts through local inference.

Explore the system →   ·   Architecture & deployment   ·   Evaluation & measurements


Wolfram — the final evolution of Chimera. A MiMo 9B based security model, fine-tuned with QLoRA and deployed locally through llama.cpp. Transforms honeypot transcripts into structured intent, ATT&CK techniques, and indicators. Open repository.

Wolfram is the final evolution of my Chimera project. Built on MiMo-V2.6-Distill-Qwen-9B, it is fine-tuned for security analysis: what an attacker intended, which objectives and ATT&CK techniques the commands support, and which indicators appear in the transcript.

The project covers fine-tuning, evaluation, GGUF deployment, and local integration with HoneySentinel. The application validates technique IDs and checks extracted indicators against captured transcripts.

Explore Wolfram →   ·   See the integration

Research and infrastructure

Amnis — persistent memory for AI agents. Hybrid semantic and keyword retrieval, wiki compilation, a knowledge graph, and an MCP server. Open repository. Aegis — prompt-injection and tool-abuse benchmarking for agents. Measures attack success and useful task completion across defense layers, with an offline simulation and real-model adapter. Open repository. Abliteration — model internals research for hybrid-attention architectures. Extracts response-region directions, applies training-free weight edits, and evaluates behavior and capability. Open repository.

Across the stack

Systems & security — Python · Go · C/C++ · Linux · Docker · Protocol emulation · MITRE ATT&CK
Models & agents — PyTorch · Transformers · QLoRA · llama.cpp · Hybrid RAG · MCP
Applications & data — TypeScript · React · FastAPI · PostgreSQL · Redis · SQLite


Let's build something worth investigating. Email haadii2005@gmail.com. Open to internships and entry-level roles.

About

mandoof — profile

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages