Skip to content
View 0x00F6's full-sized avatar
2 followers · 4 following
  • Paris
  • 04:28 (UTC -12:00)

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Block or report 0x00F6

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
0x00F6/README.md

Animated terminal: cargo run --release builds and starts 0x00F6, a glitching neon 0x00F6 title appears with the tagline 'Building things that probably didn't need to be this fast.', next to a pixel-art crab and a stream of encrypted TLS and QUIC bytes being decoded into HTTP.

Typing animation cycling through: hooking the kernel with eBPF and Rust (Aya); decrypting my own TLS 1.3 and HTTP/3 traffic, live; teaching ClickHouse to read MaxMind DBs (PR #126009); zero-copy MMDB decoding in pure Rust; dropping bad IPs at the driver with XDP.

~/projects: detailed project sheets  ~/stack: languages, tools and environment  ~/whoami: background, interests and contact

Section divider

~ $ whoami

$ whoami
0x00f6                      # U+00F6 → ö · 0xF6 = 246
$ cat ~/.plan
Rust-first systems & network hacker, based in Paris.
Kernel probes with eBPF, packets on the wire, keys in RAM, rows in ClickHouse.
Building things that probably didn't need to be this fast.
Section divider

~ $ cargo tree --depth 1

Skill icons: Rust, C++, C, Kotlin, Linux, Bash, Git, GitHub, CMake

eBPF Aya XDP TLS 1.3 QUIC and HTTP/3 ClickHouse MaxMind DB

full manifest → STACK.md

Section divider

~ $ ls ~/projects --featured

eBPF Network Nexus card: a packet inspector where TLS, QUIC, HTTPS and DoH flows turn from encrypted bytes into readable HTTP once keys are found in memory. ClickHouse × MaxMindDB card: a clickhouse-client session creates a table with ENGINE = MaxMindDB('GeoLite2-City.mmdb') and looks up 8.8.8.8, which returns US.

  • eBPF Network Nexus — watches TLS, HTTPS and HTTP/3 traffic from the kernel, finds the session keys in the sending process's memory, then decrypts, decompresses and shows every flow in cleartext in a web Packet Inspector. source: soon
  • ClickHouse × MaxMindDB — an experimental MaxMindDB table engine: query a local .mmdb file with IPv4/IPv6 longest-prefix lookups, no import step. Live state of ClickHouse pull request #126009

all sheets + pinned repos → PROJECTS.md

Section divider

~ $ git log --stat

GitHub stats for 0x00F6: stars, commits, pull requests, issues, contributions and rank. Most used languages across 0x00F6's public repositories.

$ cargo run --bin ferris 
   (\/)                (\/)
    \ \    .------.    / /
     \ \  /  o  o  \  / /
      '-.(    __    ).-'
          '-.____.-'
          //  ||  \\        compiled with --release,
                            obviously.
Neon wave footer fading from cyan to magenta to rust orange

[process exited with code 0] · projects · stack · whoami

Pinned Loading

  1. libmaxminddb-rs libmaxminddb-rs Public

    Pure Rust MaxMind DB v2 (MMDB IPv4/IPv6) reader and writer with zero-copy borrowed decoding https://0x00f6.github.io/libmaxminddb-rs

    Rust 5

  2. haproxy-spoa-ip-reputation-firehol haproxy-spoa-ip-reputation-firehol Public

    A high-performance HAProxy external agent (SPOA) that blocks malicious IPs in real-time using FireHol blocklists.

    Rust 1

  3. eBPF-ip-reputation-firewall eBPF-ip-reputation-firewall Public

    A production-grade, ultra-low-latency ingress firewall built entirely in Rust 🦀 using the Aya framework. It filters network traffic directly at the network interface card (NIC) driver level via eXp…

    Rust

  4. blink-sentinel blink-sentinel Public

    Automatically arm and disarm your Blink system using your phone’s Wi‑Fi or Bluetooth presence.

    Kotlin