🛡️ I'm Iason (Jason) Somarakis — Senior Penetration Tester based in Crete, Greece
⚔️ Offensive security and adversary emulation across energy, space, OT/ICS, and critical-infrastructure systems
🤖 Increasingly building autonomous agent systems: multi-agent runtimes, agentic pentest tooling, and portable Agent Skills
🔎 Security tooling, compliance auditing, CVE research, and training infrastructure for ethical hacking
✍️ I write up pentesting, CTFs, and security automation at d3vn0mi.com
🌐 Professional profile at isomarakis.com · threat intel at hackingallthethings.com
| 💭 | Currently working on | SIERA (AI agent orchestrator) & HackingAllTheThings (threat intel platform) |
| 🎯 | Specializing in | Penetration Testing, Security Automation, Compliance Auditing, Agentic Systems |
| 🔧 | Tech Stack | Python, TypeScript, FastAPI, React / Next.js, Docker, Ansible |
| 🏆 | Active on | HackTheBox, CTF Challenges, CVE Research & Disclosure |
| 🤝 | Consulting for | Security Assessments & Training Programs |
| 🧠 SIERA |
A personal AI operations platform. A local multi-agent runtime (~18 agents, each with its own persona, scoped toolset, and skills; 26 tool plugins) coordinated behind a voice-driven Next.js 15 / React 19 heads-up display, backed by an Obsidian knowledge vault. Loopback-only, fully self-hosted. |
| 🌐 HackingAllTheThings live ↗ |
Self-hosted cyber threat-intelligence platform aggregating 30+ open-source feeds — security news, NVD CVEs, ExploitDB / CISA KEV, dark web, MITRE ATT&CK mapping — with a live 3D attack globe. FastAPI + React across 9 Docker services, with OAuth2 SSO and RBAC. |
| 🪞 | Kagami | Offline forensic-analysis & config-auditing tool running local LLMs (Ollama) over evidence against CIS/STIG/NIST/OWASP with CVSSv3 scoring — no data leaves the host |
| 📋 | Kenbu Auditing Solution | Web-based security-audit & compliance platform — 460+ CIS benchmark checks across 8 platforms, live audit sessions, Excel reporting, GitHub OAuth SSO |
| 🏭 | ArtiForge | Cross-platform event-artifact generator for cyber-training labs — 71 Windows/Linux generators with correlated IDs, binary EVTX export, and Sigma-rule evaluation |
| 🕵️ | AgentSmith | Autonomous pentest agent driving recon and exploitation over SSH, streaming every command and piece of evidence to a live web dashboard |
| 🦅 | RAVEN EASM | External Attack Surface Management platform (Django, Celery, Redis) running 20+ recon tools with AI-powered finding correlation |
| 🧩 | Agent Skills | Portable SKILL.md capabilities for Claude, Codex, Cursor and other agents — published on MCP Market |
| 🗡️ | Ryo Tenkai | RPC client for the MSF RPC server, built for security automation |
| 🎯 | OPC UA Sniffer | Captures and dissects OPC UA traffic — credentials, read/write operations, and protocol details for OT/ICS analysis |
| 📄 | Morgans | Generates malicious/benign ODT file sets with embedded, customizable macros for phishing payload testing |
| 🔓 | EzCME | CrackMapExec wrapper that organizes enumeration output into clean, structured files for engagement analysis |
| CVE-2026-23744 | Unauthenticated RCE in MCP servers via the /api/mcp/connect serverConfig command field |
| CVE-2025-2304 | Mass-assignment privilege escalation in Camaleon CMS — CVSS 9.4 |
| CVE-2026-27470 | Authenticated second-order SQL injection in ZoneMinder getNearEvents() — CVSS 8.8 |
| CVE-2016-16113 | Proof-of-concept exploit |
|
|
|
All security research and testing is conducted in authorized environments with proper permissions.