Skip to content
View blurxy's full-sized avatar
🏠
Working from home
🏠
Working from home
1 follower · 0 following

Achievements

Achievement: Pair Extraordinaire

Achievements

Achievement: Pair Extraordinaire

Highlights

  • Pro

Block or report blurxy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
blurxy/README.md

blurxy · Rafiul Bari

Follow the evidence. Cybersecurity student at CUNY New York City College of Technology. I investigate how systems behave and build tools that make the findings useful.

🎯 Seeking security internships and full-time entry-level roles. Coursework complete December 2026, commencement Spring 2027. 🌐 blurxy.net · ✉️ rafiulbari70@gmail.com · 💼 LinkedIn

Live

  • 🔎 OSINT Field Kit: 2,141 OSINT tools from OSINT Framework and OSINT4ALL, merged and link-checked, organized by what you start an investigation with and mapped to PTES phases. A case notebook timestamps each tool used and exports a reconnaissance report.
  • 🛡️ KEV Watch: CISA's Known Exploited Vulnerabilities catalog sorted by fix-by date, with EPSS scores, vendor follows and calendar export. (source)

Security tools

  • 📡 beacon-spectrum: finds periodic C2 beaconing in connection timing alone with a Rayleigh / Z² periodogram. No payload or TLS inspection; dependency-free pcap and Zeek ingest.
  • 🔍 aur-build-diff: builds two revisions of an AUR package under bubblewrap and strace and diffs what each one actually does: new outbound endpoints, new binaries, writes outside the build tree. DNS is blocked at the systemd-resolved socket, not just the network namespace.
  • 🐍 py-exec-mcp: runs Python from an MCP client over stdin, so no shell re-parses your code. On PyPI: uvx py-exec-mcp.

Systems and builds

  • 🍄 spore: a peer-to-peer community mesh over a LAN or phone hotspot. No server, no install, zero dependencies.
  • 🎼 chladni-tui: Chladni sand patterns simulated from first principles, driven by live audio and drawn in the terminal.
  • ⚽ World Cup 2026: all 104 matches with final scores and local kickoff times.
  • 📚 Coursewake: a calmer CUNY Brightspace, as a Chrome extension in private beta.

Investigation notes, every project and how to reach me: blurxy.net

Pinned Loading

  1. aur-build-diff aur-build-diff Public

    Build an AUR package twice in an isolated sandbox and diff what each version actually does — supply-chain detection by behaviour, not static analysis.

    Python

  2. beacon-spectrum beacon-spectrum Public

    Finding periodic C2 beacons in network timing with a Rayleigh phase-coherence test — and measuring honestly why periodicity alone cannot separate a beacon from NTP.

    Python

  3. chladni-tui chladni-tui Public

    A Chladni sand plate simulated from first principles and drawn in your terminal, driven by the frequency content of real audio. Braille sub-dots, no GPU.

    Python

  4. py-exec-mcp py-exec-mcp Public

    Run Python from an MCP client without a shell mangling your code. Code goes to the interpreter over stdin, so nested quotes, f-strings and backslashes survive verbatim.

    Python

  5. spore spore Public

    An off-web mycelial mesh. Runs on one device, gets faster as peers join. Zero dependencies, Node stdlib only.

    JavaScript