# Projects Tools and infrastructure I have built, from detection engineering and cloud security to CTF platforms and red-team automation. ## Decnique - pinned: true - visibility: Public - start: 2026-08 - end: now - domains: cloud-security - languages: python - topics: detection-engineering, formal-methods - updated: 2026-10-01 - link: https://github.com/moabid42/decnique Designed and built a formal language and evaluation framework for measuring SIEM detection coverage against adversarial techniques over a common event model using nothing but pure math. ## IAMouflage - start: 2026-05 - end: 2026-08 - domains: cloud-security, offensive-security - languages: go - topics: iam, detection-engineering, attack-modeling - updated: 2026-08-27 - link: https://github.com/moabid42/IAMouflage Designed and built a detection-to-technique visualization using Neo4j, mapping methodName (detection) to permission (technique) for better visibility during red teaming. ## Verisentinel - domains: cloud-security, offensive-security - languages: python - topics: iam, attack-planning, privilege-escalation, formal-methods, language-models - updated: 2026-09-03 - link: https://github.com/moabid42/Verisentinel Experimental GCP IAM decision-support tool that checks language-model proposals against permission feasibility and modeled detection coverage before presenting actions for human approval. ## mals3scan - pinned: true - visibility: Public - domains: cloud-security - languages: python - topics: detection-engineering, malware-detection - updated: 2026-09-03 - link: https://github.com/moabid42/mals3scan Serverless AWS security pipeline that scans every file uploaded to S3 with YARA rules for malware and sensitive data, firing real-time alerts for incident response. ## GCPdvi - domains: cloud-security, offensive-security - topics: iam, privilege-escalation - updated: 2026-07-18 - link: https://github.com/moabid42/GCPdvi Deliberately vulnerable GCP IAM training lab defined in Terraform, with five identities linked by progressively harder, keyless privilege-escalation paths. ## L3AK CTF 2025 Infra - pinned: true - visibility: Internal - org: L3AK TEAM - start: 2025-04 - end: 2025-07 - domains: infrastructure - topics: distributed-systems, high-availability, caching Designed and built the infrastructure hosting the L3AK CTF 2025 event on GCP, handling more than 10k concurrent users and millions of requests. ## redteam-copilot - pinned: true - visibility: Internal - domains: cloud-security, offensive-security - topics: iam, attack-planning, language-models A GCP IAM red-teaming harness, with a deterministic propose-then-verify architecture. ## anti-debug - domains: offensive-security, systems-programming - languages: c, assembly - topics: anti-debugging, reverse-engineering - updated: 2024-03-12 - link: https://github.com/moabid42/anti-debug Experimental Linux anti-debugging research using ptrace, a modified libc, and syscall remapping to explore hook-oriented programming. ## CoGraph - domains: offensive-security - languages: python - topics: knowledge-graphs, attack-modeling, language-models - updated: 2026-04-20 - link: https://github.com/moabid42/CoGraph Red-team knowledge graph prototype combining structured security datasets with an LLM extraction pipeline and graph-based retrieval. ## AI-Dilemma - domains: ai-security - languages: python - topics: red-teaming, threat-modeling, prompt-injection, language-models - updated: 2026-03-11 - link: https://github.com/moabid42/AI-Dilemma Research on AI red and blue teaming, with a Typst paper and a notebook prototype for classifying prompt intent and selecting security policy actions. ## ft_containers - org: 42 Heilbronn - domains: systems-programming - languages: cpp - topics: data-structures, memory-management - updated: 2023-01-27 - link: https://github.com/moabid42/ft_containers Reimplemented C++ STL vector and map containers, including iterators, allocator handling, and a red-black tree, with comparison tests against the standard library. ## readelf - domains: systems-programming, offensive-security - languages: c - topics: binary-formats, reverse-engineering - updated: 2023-10-10 - link: https://github.com/moabid42/readelf ELF inspection tool written in C, with separate parsers for 32-bit and 64-bit binaries and their headers. ## ft_minishell - org: 42 Heilbronn - start: 2022-06 - end: 2022-09 - domains: systems-programming - languages: c - topics: parsing, concurrency - updated: 2023-10-10 - link: https://github.com/moabid42/shell Designed and built my own shell in pure C. ## ft_IRC - org: 42 Heilbronn - start: 2022-10 - end: 2022-11 - domains: systems-programming - languages: cpp - topics: networking, concurrency - updated: 2023-05-02 - link: https://github.com/moabid42/mini_IRC Designed and built an IRC server in pure C++. ## libasm - org: 42 Heilbronn - domains: systems-programming - languages: assembly - topics: memory-management, system-calls - updated: 2023-10-10 - link: https://github.com/moabid42/libasm Recreated basic libc functions in x86-64 assembly, including string operations, memory duplication, and read/write wrappers. ## philo - org: 42 Heilbronn - domains: systems-programming - languages: c - topics: concurrency - updated: 2022-08-08 - link: https://github.com/moabid42/philo Dining philosophers simulation in C using threads and mutexes to coordinate shared forks, meal timing, and termination. ## cyberdayCTF - org: 42 Heilbronn - domains: offensive-security, application-security - languages: python - topics: security-education, binary-exploitation - updated: 2025-03-04 - link: https://github.com/moabid42/cyberdayCTF Public Cybersecurity Day CTF challenges, solutions, and container launch scripts spanning web, cryptography, forensics, pwn, reversing, and geolocation. ## L3AK CTF 2024 Infra - org: L3AK TEAM - start: 2024-04 - end: 2024-05 - domains: infrastructure - topics: distributed-systems, high-availability, caching Developed the infrastructure hosting the L3AK CTF 2024 event, handling more than 1k concurrent users with zero downtime. ## Landing Graph - start: 2026-09 - end: now - domains: web-development - languages: javascript - topics: content-publishing - updated: 2026-10-12 - link: https://github.com/moabid42/landing-graph Designed and built my own personal blog based on "git log --graph --all". ## bounties - org: ETHGlobal Prague - domains: application-security - languages: solidity - topics: cryptographic-proofs - updated: 2025-06-01 - link: https://github.com/moabid42/bounties Hackathon prototype for verifying bug bounty award emails with vlayer and recording on-chain badges and researcher reputation.