suryansh deshwal ethical-buddy

Systems & Security Engineer building close to the machine.

OSDev . Linux internals . IPv6/P2P networking . eBPF . CTI/OSINT . distributed infrastructure

ethical-buddy@github:~$ ./profile --load

USER        Suryansh Deshwal
HANDLE      ethical-buddy
ROLE        Systems & Security Engineer / Researcher ,
BUILDS      kernels, network runtimes, terminal tools, security research labs
PLATFORM    I Use Arch B.T.W  ... sometimes BSD.
EDITOR      helix / Vim , Zellij .
MISSION     Build / breaK low supporting systems. Break assumptions. Ship useful systems.
            # Asking for privacy is not being anti-national.

I do not just want to use systems. I want to know why TF they work, and how to build better ones, Because i really need a better one ahhhh...

Kernel

syscalls . memory . VFS . tracing . eBPF

Network

IPv6 . P2P . relays . DHT . SD-WAN, eBPF

Security

OSINT . RE . runtime security . threat intel

Featured Builds

VX6

IPv6-native decentralized networking

A self-hosting fabric for persistent node identity, encrypted forwarding, service discovery, DHT lookup, relays, and peer-to-peer infrastructure.

BumbelBee

Operating system from scratch

A POSIX-inspired OS project for exploring boot, memory, interrupts, execution, syscalls, processes, filesystems, and kernel architecture.

Vimgo

Terminal-first file management

A keyboard-driven Linux file manager written in Go for people who would rather stay in the terminal.

KERNEL-HACKING

Experiments below userspace

A practical playground for understanding kernel behavior, low-level interfaces, tracing, security, and implementation details through experiments.

Achievements & Signal

Head Organizer

CyberSecure-X

Led CyberSecure-X at IDIAS as a first-of-its-kind on-device physical network, real-world CTF organized in September 2025.

Built around hands-on security thinking: real devices, real network behavior, practical exploitation paths, and competition pressure closer to real infrastructure than a normal browser-only CTF.

Open Source

Upstream work

Contributed to OWASP Juice Shop / MultiJuicer and Sniffnet.

Comfortable reading unfamiliar codebases, landing targeted changes, and working inside real maintainer constraints.

Builder

From boot to network

Maintains public projects across OSDev, Linux internals, terminal tooling, IPv6-native distributed infrastructure, and security research.

Public GitHub footprint: 47 repositories, 69 stars, and a profile centered on kernels, tools, and security projects from scratch.

The Layer Map

                    ┌──────────────────────────────────────┐
                    │ APPLICATIONS                         │
                    │ CLIs . CTI . automation . services   │
                    └─────────────────┬────────────────────┘
                                      │
                    ┌─────────────────▼────────────────────┐
                    │ DISTRIBUTED SYSTEMS                  │
                    │ P2P . DHT . relays . identity        │
                    └─────────────────┬────────────────────┘
                                      │
                    ┌─────────────────▼────────────────────┐
                    │ NETWORK                              │
                    │ IPv6 . routing . packets . tunnels   │
                    └─────────────────┬────────────────────┘
                                      │
                    ┌─────────────────▼────────────────────┐
                    │ LINUX / KERNEL                       │
                    │ eBPF . syscalls . VFS . memory       │
                    └─────────────────┬────────────────────┘
                                      │
                    ┌─────────────────▼────────────────────┐
                    │ HARDWARE                             │
                    │ x86-64 . boot . interrupts . CPU     │
                    └──────────────────────────────────────┘

                           I like working down here.

Tech Arsenal

C / C++	kernels, systems programming, networking, performance-sensitive code
Go	network daemons, distributed systems, infrastructure, terminal tools
Rust	safe systems programming, security tooling, network monitors
Python	research automation, OSINT, CTI, exploit support tooling
Assembly	x86-64 boot flow, architecture debugging, CPU-level understanding

Research Mode

Open operating_systems.yml

operating_systems:
  - kernel architecture
  - deterministic / replay-oriented execution
  - schedulers, VFS, memory and syscalls
  - low-level observability

Open networking.yml

networking:
  - IPv6-first infrastructure
  - decentralized service discovery
  - peer-to-peer overlay networks
  - SDN and packet processing
  - high-performance packet paths

Open security.yml

security:
  - kernel / runtime security
  - reverse engineering
  - threat intelligence and OSINT
  - secure distributed systems
  - real-world CTF infrastructure

GitHub Telemetry

Static fallback if external cards rate-limit:
47 repos . 69 stars . 59 followers . pinned systems/security projects

Current Process

package main

func main() {
    me := Engineer{
        Name:   "Suryansh Deshwal",
        Handle: "ethical-buddy",
        Builds: []string{
            "IPv6-native distributed infrastructure",
            "operating-system and kernel experiments",
            "terminal-first Linux tools",
            "security research and real-world CTF labs",
        },
        OptimizesFor: "technically difficult work that teaches something real",
    }

    me.ReadTheImplementation()
    me.QuestionTheAbstraction()
    me.Ship()
}

Navigation Menu