Selected works, scripts, and dark experiments with details on purpose and status.
Stages
Flagged the need for a portable multi-UAS common operating picture given how much drone activity has picked up and how little Remote ID coverage actually exists. Scoped a system that fuses telemetry, draws tracks on a map, catches conflict and geofence violations, and writes tamper-evident flight logs.
The frontend map and services are running against simulated and SITL telemetry. Conflict and geofence alerting paths are exercised, and logging is wired up end-to-end. Waiting on drone funding to move past sim feeds.
Stages
Every active Katoolin fork I could find was years behind. Laid out goals for a simple Ubuntu-first installer that could handle alternate install paths cleanly.
Rough CLI skeleton in place with tool categories, hooks for DKMS and alternate install methods, and repo toggles. Still untested end-to-end.
Picking this back up in early 2026.
Stages
Met with the Poulsbo client to pin down what they actually needed, scoped the work around accidental endpoint leaks, and mapped out where regulated data lives on laptops plus the common egress paths it escapes through.
Wrote up the monitoring approach, policy drafts, and demo prep docs. That included a plan for running the proof-of-concept walkthrough on cloud compute.
Starting the actual code and implementation work now.
Stages
Settled on the name-encounter probability idea as the MATH 341 project and scoped what it would need.
Got the backend design signed off and built it against the 2020 U.S. Census API to crunch encounter probabilities.
Stood up a minimal React UI for picking a state, typing a name, and seeing the result.
Rolled out multi-name inputs, a few different probability modes, and early simulations and generators.
Presented the project in class using a live S3-hosted build that worked end-to-end.
The beta is still running. No active development at the moment.
Details
A common operating picture for small drone teams, hosted on a single laptop. Maps multi-sUAS telemetry, catches conflicts and geofence violations as they happen, and logs the whole flight for after-action review.
Details
A Katoolin rewrite for people who want Kali security tools on Ubuntu without breaking the host. Includes sanity guards on install paths and repo toggles so the base system stays stable.
Details
WWU capstone project for clients in Poulsbo. Cuts endpoint data leaks through monitoring policies, egress controls, and reporting built to hold up under audit.
Details
A React app that pulls from 2020 Census data to estimate how likely you are to run into someone with a given name in a given state.
Input first (and/or last) name and pick a state. Demo uses nickname "Max."
Shows results for "Max" in Washington State.
Set a percentage chance to meet a "Max" anywhere in Washington State, plus the encounters needed.
Multi-name option filled with several common names, showing combined stats and comparisons.
Details
Python script built on Telethon. Logs online and last-seen state changes for a target user, handles Telegram rate limits when they hit, and rotates its own log files on a weekly schedule.
* Created for educational and statistical use only, this project demonstrates how to monitor Telegram activity with the Telethon API. Do not use it for unauthorized tracking. Users are responsible for complying with all laws and terms of service. I assume no liability for misuse or legal consequences.
Details
A testbed for trying out Python obfuscation techniques and watching how each transformation chips away at readability and static analysis.
Details
A Go obfuscation pipeline wrapped around garble, with extra AST-level transformations I bolted on to see how far I could push the output.
Details
Team-built malware analysis platform with a Windows UI for triage, sample labeling, and reports that stay consistent across runs.
Details
A two-difficulty web challenge I built for the Red Team Association's BSides Seattle 2026 CTF. 95 players across 30 teams took it on and the backend processed over 1.1 million flag submissions across a 30-hour event. Worked on it alongside members of Apple's Red Team and other security folks in the industry.
Details
Python PoC for CVE-2025-24893. Injects Groovy through the SolrSearch RSS endpoint and wraps output in marker strings, so you can tell straight away whether a target build is vulnerable.
* Authorized environments only. Educational use.
Details
Bash installer that pulls the Realtek RTL88x2BU driver source, builds it through DKMS on Ubuntu, and sorts out dependencies and post-install checks in one run.
Driver source: morrownr/88x2bu by morrownr · Script author: Maks ( @torjan0 ).
Details
Bash tool that parses /proc to compare running processes using a combined memory/CPU difference metric. Filters by owner or command, sorts any field, exports to text/CSV/JSON/HTML, and runs in a long-lived monitoring mode with desktop notifications.
