Skip to content
View webwizardg99's full-sized avatar
:electron:
ACAB
:electron:
ACAB

Block or report webwizardg99

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
webwizardg99/README.md
███╗   ██╗ ██████╗ ██╗  ██╗    ██╗      █████╗ ██████╗ 
████╗  ██║██╔═══██╗╚██╗██╔╝    ██║     ██╔══██╗██╔══██╗
██╔██╗ ██║██║   ██║ ╚███╔╝     ██║     ███████║██████╔╝
██║╚██╗██║██║   ██║ ██╔██╗     ██║     ██╔══██║██╔══██╗
██║ ╚████║╚██████╔╝██╔╝ ██╗    ███████╗██║  ██║██████╔╝
╚═╝  ╚═══╝ ╚═════╝ ╚═╝  ╚═╝    ╚══════╝╚═╝  ╚═╝╚═════╝ 

Typing SVG

Profile Views GitHub followers Stars Website


class WizardG:
    def __init__(self):
        self.name     = "Gabriel Szabados"
        self.alias    = "wizardg / NOX"
        self.location = "Dunaszerdahely, Slovakia 🇸🇰"
        self.role     = "Security Researcher & Python Engineer"
        self.founded  = "ShadowBridge — Cybersecurity Monitoring Platform"
        self.exp      = "10+ years building security infrastructure"

    @property
    def stack(self):
        return {
            "languages":  ["Python", "JavaScript", "TypeScript", "Bash"],
            "backend":    ["FastAPI", "aiohttp", "Node.js"],
            "security":   ["Cowrie", "Suricata", "Wazuh", "MITRE ATT&CK", "Metasploit"],
            "ai":         ["Ollama", "OpenAI", "Claude", "LangChain", "LLM fine-tuning"],
            "infra":      ["Docker", "Kali Linux", "PostgreSQL", "Redis", "Tailscale"],
            "currently":  ["NOX Lab v2", "ShadowBridge SaaS", "HoneyAI Phase 3"],
        }

me = WizardG()
print(f"[{me.alias}@NOX ~]$ ./build_the_future.sh 🚀")

🔥 Featured Projects

🛡️ ShadowBridge

Full-stack cybersecurity monitoring platform

  • 12 integrated security modules
  • Real-time threat dashboards & AI analysis
  • Honeypot aggregation + MITRE ATT&CK tracking
  • Built for SOC teams and solo operators

Stars Live

🍯 HoneyAI

AI-powered SSH Honeypot

  • LLM generates realistic shell output per attacker command
  • Real-time TTP detection & MITRE ATT&CK classification
  • Cowrie LLM backend compatible (drop-in replacement)
  • SENTINEL + ATLAS integration

Stars Issues welcome

🗺️ ATLAS

Purple Team ATT&CK Tracker

  • Full MITRE ATT&CK matrix (14 tactics, 200+ techniques)
  • Red / Blue / Purple TTP status tracking
  • REST API — integrates with any SOC dashboard
  • Lightweight, self-hosted, no cloud dependency

Stars

Multi-Source Honeypot Aggregator

  • Cowrie SSH + HTTP honeypot + Canary tokens unified
  • AbuseIPDB IP reputation enrichment
  • Real-time threat timeline & alerts
  • JSON API for dashboards and SIEMs

Stars


🏗️ NOX Lab Infrastructure

A 5-node cybersecurity homelab I've been building since 2016 — everything runs here.

┌─────────────────────────────────────────────────────────────────┐
│                        NOX LAB NETWORK                           │
│                                                                  │
│  [NOX Server / Orchestrator]  192.168.1.102                      │
│   ├── ShadowBridge Dashboard     :8888  ← control plane          │
│   ├── SENTINEL (SSH/HTTP/Canary) :8181/8282                      │
│   ├── HoneyAI SSH Honeypot       :8191  ← LLM-powered            │
│   ├── ATLAS ATT&CK Tracker       :8686                           │
│   ├── VAULT Credential Hub       :8585  ← John/Hashcat           │
│   ├── NOX-COMMAND Kill Chain     :8787                           │
│   └── NOX-BRAIN AI Layer         :8484  ← Ollama                 │
│                                                                  │
│  [Assistant]  192.168.1.129 — LLMs (LM Studio, Ollama)          │
│  [Monitoring] Tailscale — passive sniffing, Suricata IDS         │
│  [Attack]     Tailscale — Metasploit, C2 (Villain), tools        │
│  [Victim]     192.168.1.134 — i686 Kali, intentionally vuln      │
└─────────────────────────────────────────────────────────────────┘

⚡ Tech Arsenal

Python FastAPI Docker Kali Linux Node.js TypeScript PostgreSQL Redis OpenAI Metasploit Suricata Wazuh


📊 GitHub Stats


🤝 Collaborate / Support

Looking for:

  • 🔬 Security researchers to test and contribute to HoneyAI, SENTINEL, ATLAS
  • 💡 Feature ideas and bug reports — open an issue
  • 🌍 Translations, docs, and integration PRs

Support the NOX Lab:

ko-fi Freelancer Fiverr


📫 Find Me

Website Email Freelancer Fiverr

[NOX@shadowbridge ~]$ echo "10 years building. Still going."
10 years building. Still going.
[NOX@shadowbridge ~]$ _

@webwizardg99's activity is private