phase 01 — initial access
One way in is enough.
One permission too many. A service nobody remembers. One email that gets opened. That's all it takes.
Phishing / Exposed services / Misconfiguration
Systems leavetraces.
I build software. I study how systems fail, and what they leave behind.
SMEEware
Software & Offensive Security
Independent development. Open source.
02 / whoamiMoreno / SMEEware
PERSONAL FILE /// MORENO
An attacker’s
mind.
A developer by conviction. Curious about what happens beneath the surface — and driven to understand every step.
SEQUENCE 01 / 03
Certified application developer
I completed my application development apprenticeship and learned to build software for real projects.
03 / current focus
My learning path
What I've completed, what I'm studying now, and what I plan to do next.
foundationcompleted
Certified application developer
My IHK application development apprenticeship was my entry into IT.
04 / arsenal
Skills & Tools
Languages, systems, and tools I use while learning software and offensive security.
SEQUENCE 01 / 03
Languages I use
From systems code to scripts and interfaces.
CLANGUAGE SIGNAL / 01
05 / projects
Projects
Current projects and open-source tools I'm working on.
FlagshipACTIVE
A local AI chat app and API with streaming, voice, file access, and support for your own models.
View repo
Next.js / FastAPI / AI / Local-first0—
- Reasoning + tool calls in a live stream
- Voice, file access, your own models
- Local-first, with local or cloud models
FlagshipACTIVE
A local AI chat app and API with streaming, voice, file access, and support for your own models.
View repoNext.js / FastAPI / AI / Local-first0—
- Reasoning + tool calls in a live stream
- Voice, file access, your own models
- Local-first, with local or cloud models
Open SourceACTIVE
A self-hosted multi-protocol honeypot that lets attackers in, records every command and maps it all to MITRE ATT&CK.
View repo
Go / Honeypot / Next.js / Three.js0—
- SSH, Telnet, FTP, Redis, MySQL & HTTP with a fake shell
- Attacker profiles, IOCs, blocklists for iptables/nftables/pf
- Monitor API with a live stream and a 3D sentinel
commsChannel open
Find me here.
Open to roles in offensive security & software engineering. Encrypted preferred.
↳ smee-sh Interactive terminal
shell
smee-sh
THREAT INTEL
SMEEWARE.OS — smee-sh v3.0 · secure shell
host SIGINT-001 · access root · clearance offensive
type help to list commands