███████╗██████╗ █████╗ ███╗ ██╗██╗ ██╗███████╗██╗ ██╗
██╔════╝██╔══██╗██╔══██╗████╗ ██║██║ ██╔╝██╔════╝╚██╗██╔╝
█████╗ ██████╔╝███████║██╔██╗ ██║█████╔╝ ███████╗ ╚███╔╝
██╔══╝ ██╔══██╗██╔══██║██║╚██╗██║██╔═██╗ ╚════██║ ██╔██╗
██║ ██║ ██║██║ ██║██║ ╚████║██║ ██╗███████║██╔╝ ██╗
╚═╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═══╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝
Hardware & Firmware · Browser & Parser Security · Adversarial Systems
Reverse engineer everything.
I work at the boundaries between formats, parsers, devices, and the automated systems that consume them. My research spans embedded firmware, browser internals, mutation XSS, parser differentials, polyglots, and adversarial data pipelines.
The goal is practical: find the edge case, build a reproducible proof of concept, understand why it works, and document the result.
observe → reduce → reproduce → document
| Area | Work |
|---|---|
| Hardware & Firmware | Embedded firmware analysis, proprietary protocols, locked-down Android devices, and residential or commercial infrastructure. |
| Browser & Parser Security | Mutation XSS, HTML5 parser behavior, SVG and compositor edge cases, sanitizer differentials, and browser-based testing tools. |
| Adversarial Systems | Structural asymmetry, malformed formats, Unicode edge cases, anti-scraper research, and failures in automated ML ingestion pipelines. |
| CTF & Tooling | Purpose-built reconnaissance utilities, challenge workspaces, exploit-chain visualization, and repeatable research workflows. |
| Project | Description |
|---|---|
| INJECTRIX | Self-contained browser-console JavaScript arsenal for web-application reconnaissance, injection testing, and reporting, with a headless Playwright driver for automation. |
| muxxerfuzzer | Mutation-XSS fuzzer with a three-path differential oracle, an 11-engine sanitizer matrix, and sandbox execution canaries. |
| reflex-chain-builder | Browser-based toolkit for constructing, visualizing, and generating proof-of-concept payloads for chained reflex exploitation attacks. Zero dependencies and no build step. |
| adversarial-ingestion | The Asylum Pages — applied structural asymmetry and parser sabotage across automated LLM data pipelines. |
| Jxl-TripleStack | A 2,078-byte triple-container polyglot combining JPEG XL, PDF 2.0, and WebAssembly in one file. |
| ecOPUSine | Encode data into video, upload it to YouTube, download it elsewhere, and decode it losslessly. |
| alices-fear-and-loathing | Anti-scraper, anti-ML, emergent SVG, and executive-state attack demonstrations. “We can’t stop here, this is scraper country.” |
| Substance-D | A-Scanner-Darkly Scramble Suit — anti-scanner and anti-ML defensive research. |
| Project | Description |
|---|---|
| Siren | TTS-audio polyglot research targeting container-level parser confusion. |
| I-Ihallucination | Adversarial ML tooling and hallucination-focused experiments. |
| The-Invisible-Ink | Unicode exploitation in modern ML systems and automated pipelines. |
| GHOSTBYTE | Haunting the space between bytes. |
| Jubilant-systems | Adversarial ML testing suite. |
| FrankSX-Yesterday | Novel adversarial ML research suite. |
| alice-in-wonderland | Alice still has stories to tell. #GonzoTrials |
| ..--..--.. | Memorable indigestion. May cause irritable byte syndrome and severe fever dreams. |
| Project | Description |
|---|---|
| Firmwars | Firmware security-analysis toolkit. |
| KaonWifiBrute | Research into weak Wi-Fi credentials on the KAON DG2144 and similar devices. |
| SamyGO Firmware Patcher | Python 3 adaptation of the SamyGO Samsung TV firmware patcher. |
| Hitwords | Firmware keyword extraction. |
| QuitTweakInforASec | Browser research utilities for getting around that final step. |
| Project | Description |
|---|---|
| RingZer0 | A workspace for collecting and organizing RingZer0 CTF material. |
| PWN.College-Workspace | Python scraper for collecting PWN.College dojos, modules, challenges, and descriptions into an organized workspace. |
Research notes, technical write-ups, and machine-readable output:
frankhacks.blogspot.com — JSON and Markdown. No fluff.
Open an issue for research enquiries, collaboration, or responsible disclosure.
Break constraints. Prove the behavior. Document the edge.