Skip to content
View GHSFS's full-sized avatar
🦀
Building zero-dependency Rust tools & forensics suites 🦀⚡
🦀
Building zero-dependency Rust tools & forensics suites 🦀⚡

Block or report GHSFS

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
GHSFS/README.md

👋 Hey there!

I'm a systems engineer focused on writing blazingly fast native software in Rust, dissecting compiled binaries, and engineering low-level tools with zero runtime tax.

I care deeply about performance and efficiency. I don't like slow tools, bloated runtimes, or waiting 15 seconds for a heavy JVM just to inspect a 20KB executable. If software can run in under 1 millisecond with a tiny memory footprint, that is how it should be built.


🚀 Flagship Project: binvibe

Ultra-fast native binary reverse engineering MCP server & pragmatic intent plugin.
Crafted 100% in Rust, designed for high-speed disassembly and seamless developer pairing.

CI Mirror Sync License: MIT OR Apache-2.0

  • The Problem: Existing reverse engineering tools (Ghidra, IDA Pro, heavy wrappers) have long cold-start times, consume gigabytes of RAM, or interrupt developers with defensive refusals when inspecting machine instructions.
  • The Solution: binvibe boots in under 1ms, decodes instructions at nanosecond speeds using iced-x86, parses PE/ELF/Mach-O via zero-copy memory maps (goblin), and reconstructs high-level pseudo-C control flow.
  • Native & Cross-Platform: Self-contained binaries with zero external runtime dependencies, supporting Windows, Linux, and macOS out of the box.
  • AI Pair Programming (MCP): Implements the Model Context Protocol (MCP) to provide clean, token-optimized assembly and function summaries directly into modern coding workflows.

👉 Repository: github.com/GHSFS/binvibe


⚙️ Engineering Principles

  • Speed & Minimalism: Zero runtime overhead, minimal memory footprints, and ruthless optimization.
  • Native First: Standalone compiled binaries with no bulky VM or interpreter dependencies.
  • Pragmatic Craftsmanship: Code that directly solves real-world engineering problems cleanly.
  • Ecosystem Redundancy: Core projects are replicated across GitHub, GitLab, and Hugging Face.

📦 Other Projects I've Built

🛡️ Binary Forensics, Security & Steganography (Click to collapse)

🕵️ shadow-vault

Zero-trust encrypted vault (svault) combining lossless PNG/WAV/BMP/MP3 steganography with dual hardware binding (Argon2id + ChaCha20-Poly1305 + Windows DPAPI).
Features duress decoy volumes, Shamir secret sharing, Reed-Solomon self-healing, and TOTP.

Rust Win32 DPAPI

Zero-dependency binary forensics & static inspection engine (bsentinel).
Parses PE32/PE64, ELF64, Mach-O, analyzes packer entropy, checks Authenticode certificates, and generates declarative patch rules.

Rust Forensics

Zero-dependency network packet forensics and traffic fingerprinting (nspecter).
PCAP/PCAPNG parser, TCP stream reassembler, TLS JA3/JA4 fingerprint extractor, and QUIC decryptor.

Rust Network

IoT & embedded firmware unpacker and vulnerability auditor (fcarver).
Carves SquashFS v4, U-Boot, and TRX containers, slices partitions via entropy mapping, and analyzes multi-arch shellcode.

Rust Firmware

📦 Windows Desktop Workflow Tools (Click to expand)

Three modular desktop tools composing a streamlined workflow: Clipboard → System Tray → Remote Downloader → Toast Alert.

Headless remote downloader relaying fetched content securely to target cloud storage.

Lightweight Windows system tray companion. Monitors clipboard for target URLs and triggers native toast notifications.

Windows Explorer context menu shell extension for quick one-click file and link dispatching.

🤖 Serverless & Edge Bots (Click to expand)

Serverless Telegram bot running on Cloudflare Workers that dynamically routes prompts between lightweight fast-inference and deep-reasoning models based on query complexity.

TypeScript Cloudflare Workers


🛠 Tech Toolbox

fn current_stack() -> Vec<&'static str> {
    vec![
        "Rust (iced-x86, goblin, tokio, memmap2)",
        "Win32 API & Windows DPAPI Security",
        "Binary Forensics & Reverse Engineering",
        "Model Context Protocol (MCP) Servers",
        "TypeScript & Cloudflare Workers Edge",
    ]
}

Rust Tokio Win32 Cloudflare TypeScript


🌐 Multi-Platform Mirrors

All major tools are synchronized across open ecosystems:


⚡ "Small binaries, sharp edges, and zero runtime tax."



footer

Pinned Loading

  1. shadow-vault shadow-vault Public

    Zero-trust steganography and dual-layer hardware-bound encrypted vault — conceal sensitive files inside ordinary PNG/audio carriers or seal them with Argon2id + ChaCha20-Poly1305 + Windows DPAPI.

    Rust 1

  2. bin-sentinel bin-sentinel Public

    Zero-dependency binary forensics, PE/ELF static analyzer, packer entropy detector, and declarative byte-patching toolkit in pure Rust.

    Rust

  3. net-specter net-specter Public

    Zero-dependency network packet forensics, PCAP/PCAPNG analyzer, TLS JA3/JA4 fingerprinting engine, and covert channel detector in pure Rust.

    Rust

  4. firm-carver firm-carver Public

    Zero-dependency IoT and embedded firmware unpacker, multi-format magic carver, and static vulnerability auditing engine in pure Rust.

    Rust

  5. remote-dl remote-dl Public

    Stream-to-cloud download manager — pipe URLs directly to personal cloud storage without staging on local disk.

    Rust 2

  6. llm-router-bot llm-router-bot Public

    Telegram + Discord bot that routes messages across free-tier LLMs (Groq / DeepSeek / Gemini / Workers AI / Qwen) on a single Cloudflare Worker

    TypeScript