┌──────────────────────────────────────────────────────────────────────────────┐ │ │ │ ██████╗ ███████╗██╗ ██╗██████╗ █████╗ ██████╗ ██████╗ │ │ ██╔══██╗██╔════╝██║ ██║██╔══██╗██╔══██╗██╔══██╗██╔════╝ │ │ ██║ ██║█████╗ ██║ ██║██║ ██║███████║██████╔╝██║ ███╗ │ │ ██║ ██║██╔══╝ ╚██╗ ██╔╝██║ ██║██╔══██║██╔══██╗██║ ██║ │ │ ██████╔╝███████╗ ╚████╔╝ ██████╔╝██║ ██║██║ ██║╚██████╔╝ │ │ ╚═════╝ ╚══════╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝ │ │ │ │ SECURITY RESEARCHER · ZERO-TRUST ARCHITECT · AI ENGINEER │ └──────────────────────────────────────────────────────────────────────────────┘
"Hack ethically. Build defensively. Share everything."
I'm Jainam H. Maru — a security researcher, OS developer, and full-stack engineer who builds AI-powered defensive tooling and studies attacker behavior for a living (and a hobby). My sweet spot is where threat intelligence meets machine learning:
- 🕵️ Threat intelligence collection — honeypots, dark-web OSINT, MITRE ATT&CK mapping
- 🏰 Zero-Trust architecture — CISA ZTMM-aligned labs with OPA, oauth2-proxy, mTLS
- 🤖 AI engineering — LLM-assisted analysis (Ollama, Groq), ML malware detection with SHAP explainability
- 🎓 Education systems — building EduOS, an open-source operating system for education, secure exams & cyber training
I don't just write code — I document everything, CI-test everything, and open-source everything that can be.
| Project | What it does | Stack |
|---|---|---|
| 🕵️ Nightattacker | Autonomous mobile pentest agent — drop it on a network, it discovers, enumerates, exploits & reports. Local AI on a phone's GPU, zero cloud | Python · llama.cpp · OpenCL · Kali NetHunter |
| 👁 ssh-honeypot | AI-driven SSH deception — captures attacker commands, geolocates, scores threat, maps to MITRE ATT&CK | Python · Paramiko · Ollama · Docker |
| 🏰 zero-trust-lab | CISA ZTMM 2.0 lab — nginx + oauth2-proxy + OPA + authz-bridge across 4 VMs | Docker · OPA · Authentik · WireGuard |
| 🔬 malware-detector | PE malware detector — YARA + Random Forest + EMBER 2381 features + SHAP | Python · FastAPI · scikit-learn |
| 🕸 dark-sentinel | Dark-web threat intel crawler — NLP sentiment, geo-tagging, real-time dashboard | Python · React · Flask · NLP |
| 🎓 eduos | FreeBSD educational OS — exam lockdown, encrypted admin, agent/server architecture | Python · PyQt6 · FastAPI · FreeBSD |
| 🔑 password-cracker-toolkit | Industrial-grade cracking suite — masks, rules, combinator, sessions | Python · CUDA |
| 📝 daily-notes | Daily engineering notes, scripts and journal | Markdown · Python |
| Project | Contribution | Status |
|---|---|---|
| beeware/toga | Fix AsyncResult.__bool__ so truthiness raises the helpful exception message |
✅ Merged |
| pschanely/CrossHair | Fix keyword-only arg crash, max_iterations=0 NameError, and format_boundargs TypeError |
✅ Merged |
| Nayjest/GITO | Fix None crashes in answer(), cmd_answer, and deploy --commit |
⏳ Open |
| jupyterhub/kubespawner | Fix implicit string concatenation breaking singleuser_lifecycle_hooks deprecation |
⏳ Open |
| pypsa-meets-earth/pypsa-earth | Exit after writing empty hydro profile to avoid NameError on inflow | ⏸ Closed unmerged |
| garagehq/nightcrawler | Catch loud nmap under sudo prefix during training-data cleanup | ⏳ Open |
| qeeqbox/social-analyzer | README documentation fixes | ✅ Merged |
| lissy93/web-check | Bug fixes, SECURITY.md, non-routable IP detection | ✅ 4 PRs merged |
| donnemartin/system-design-primer | Documentation fix | ✅ Merged |
| scanapi/scanapi | Migrated pytest-freezegun → time-machine | ⏳ PR #1011 |
| OWASP/CheatSheetSeries | Grammar fix + password storage + mentoring | ✅ Merged |
| OWASP/Nest | Server-side program status validation | ✅ Merged |
| fastapi/fastapi | Security best practices documentation | ⏸ Closed |
| ossf/cve-bin-tool | Performance optimizations | ⏳ Open |
"Code with intention. Secure with ethics." — Jainam H. Maru