Red Team Operator and open source security researcher based in Mexico 🇲🇽 UTC-6.
I design and build offensive security tools from scratch — every module is tested in authorized environments, every vulnerability class is documented for defenders.
My work focuses on web application exploitation, network penetration, OSINT intelligence gathering, and malware static/dynamic analysis. I believe the only way to build strong defenses is to deeply understand how attacks work at a technical level — not just conceptually, but hands-on.
Currently publishing 13 open source security tools used by researchers and red teamers. All tools require explicit authorization to use.
🟢 Available for authorized engagements, research collaborations and consulting.
┌─[krypthane@redteam]─[~]
└──╼ $ cat profile.txt
alias : krypthane
role : Red Team Operator | Open Source Developer
focus : Web Exploitation · Network Pentesting
OSINT & Intelligence · Malware Analysis / RE
Android/ADB Security · Tool Development
location : Mexico 🇲🇽 UTC-6
tools : 13 open source security tools published
contact : github.com/wavegxz-design | t.me/Skrylakk
status : 🟢 AVAILABLE FOR AUTHORIZED ENGAGEMENTS
ethics : ethical hacking only — always authorized
└──╼ $ cat mission.txt
"Break systems ethically. Document everything.
Build better defenses."
└──╼ $ █13 production-grade tools — all open source, all documented, all requiring authorization
| Tool | Ver | Stack | Description | |
|---|---|---|---|---|
| 🔍 | recon-kit | v2.1.3 |
Bash |
Modular recon — WHOIS, DNS+AXFR, subdomains, Nmap live output, SSL |
| 🌐 | webcheck | v2.0.0 |
Bash |
HTTP auditor — 11 modules, 0-100 score, WAF detect, JSON output |
| ⚡ | privesc-kit | v1.1.0 |
Bash |
Linux privesc — SUID, sudo, cron, GTFOBins, kernel CVEs |
| 💣 | payload-kit | v1.0.0 |
MD |
200+ payloads — SQLi, XSS, SSTI, CMDi, LFI, XXE, SSRF |
| 👁️ | FIXTT | v7.5 |
Python |
18+ OSINT modules — IP, email, Shodan, metadata, dark web, VIN |
| 🐛 | Bug-Attacker | v1.0 |
Python |
IP/phone lookup, port scan, subdomain & subdir enumeration |
| 🕸️ | NullTrace | v1.0 |
Python |
Web recon — CMS detect, WP scan, SQL error enumeration |
| ☠️ | PhantomStrike | v1.0 |
Python |
Red team — Nmap, Shodan, FTP/SSH brute, Metasploit RPC |
| 📱 | NEXORA-TOOLKIT | v1.0 |
Bash |
Modular ADB security & forensics toolkit for Android |
| 👻 | GhostCheck | v1.0 |
JS |
30+ web security checks — SSL, DNS, ports, headers, WAF, WHOIS |
| 💀 | devilZERO | v1.0 |
Python |
Modular DDoS testing toolkit — Layer 4/7, Amplification, proxy support |
| 🐉 | hydra-deploy | v5.0.1 |
TS |
Deploy CLI — auto-detect stack, self-healing retry, README generator |
| 🕵️ | ShadowEye | v1.0 |
Python |
OSINT framework — username, phone, email, domain, IP intelligence |
|
🔴 Web Exploitation 🟠 OSINT & Intelligence |
🟡 Network Penetration 🟣 Malware Analysis / RE 🟢 Tool Development |
| Platform | Status | Focus |
|---|---|---|
 |
🟢 Active | Web · Linux · Active Directory |
 |
🟢 Active | Red Team paths · OSINT · AV Evasion |
 |
🟢 Active | Bandit · Narnia · Linux Fundamentals |
 |
✅ Done | Web Exploitation · Cryptography |
 |
🔴 Active | DVWA · Juice Shop · Malware VM · Ghidra |
⚠️ All tools are for authorized security testing only. Unauthorized use against systems you don't own is illegal.