Website & Blog

Hi! I'm corvus0x, Nice to meet you!

💬 Me: Software Engineer documenting hands-on work in Incident Response, Digital Forensics, and Threat Hunting. I build and automate IR playbooks; write detection rules and parsers; perform memory/disk/network forensics (timelining, artifact carving); and develop tools to speed triage and containment. Open to collaborations on security research and tooling.

🌱 Projects & Tools:

• 1️⃣ corvus0x.com
           \___ This is my personal blog. It documents real-world work in Incident Response, Digital Forensics, and Threat Hunting—post-mortems, methodologies, plus the scripts and tools I use to speed up triage, containment, and recovery.
                   \_ HTML JavaScript CSS Hugo Framework

• 2️⃣ HashHunter0x
           \___ Ultra-fast MD5 lookups against MalwareBazaar, VirusShare, and custom lists. Designed for incident response. No dependencies.
                   \_ Python

• 3️⃣ ESXIe0x
           \___ Automated forensic collection tool for VMware ESXi. It gathers key artifacts—logs, users, processes, VMs, and network info—for security analysis. Designed for incident response, it provides structured output and a visual HTML report to support quick and effective investigations.
                   \_ Shell

• 4️⃣ IPAbuseChecker0x
           \___ Designed to assist Incident Response teams in efficiently analyzing large volumes of suspicious IP addresses. By leveraging the AbuseIPDB API, it quickly retrieves threat intelligence, categorizes risks, and generates structured reports in CSV and HTML formats.
                   \_ Python

• 5️⃣ IPTracker0x
           \___ Tool for analyzing IP addresses using the ipinfo.io API, providing detailed information, including ASN data and malicious ASN detection. It generates CSV and HTML reports, highlighting suspicious IPs. Designed for Incident Response and cybersecurity investigations, it helps analysts quickly assess large volumes of data.
                   \_ Python

• 6️⃣ IPTor0x
           \___ The tool analyzes a list of IP addresses to identify which ones are TOR exit nodes, displaying the results both in the console and in a well-structured HTML report. This report is particularly useful for security analysis and Threat Hunting activities.
                   \_ Python

---