A self-hosted OSINT platform. You enter a domain, IP, email, phone or username, and it runs 26 modules at once and builds one report with an exposure score.
240+ stars, 110+ forks and 85 contributors on GitHub; the Docker image has been pulled about 700 times.
In two weeks of October 2026 the code was cloned by about 600 unique users.
26 modules, 16 of them work without API keys; interface in 9 languages; 500+ automated tests.
I review pull requests from contributors and keep a public demo running on my own server.
A booking platform for a fictional private space tourism company, built for the Tyumen regional stage of Digital Wind, an international competition of computer works, in the web development category. We took first place; I led a team of two.
Mission catalog, seat booking and a FastAPI backend with 10 REST endpoints.
Our own design system in the style of a mission control screen, with live countdowns and an orbit diagram.
Next.js, TypeScript, FastAPI
HACKANET
Hackathon, backend developer
Analytics for the Russian Aerobic Gymnastics Federation that finds judging bias. Our team of three had 72 hours; I built the backend and the bias-detection engine.
Bias is detected from score-dependent thresholds and per-region coefficients.
At the final pitch we showed the performance work on the backend: N+1 queries removed, indexes on the hot fields. That is the slide in the photo.
FastAPI, PostgreSQL, Next.js
Формат7
Client project, in production
An online print shop in Tyumen. Customers calculate the price, upload a layout and pay on the site; managers handle orders in an admin panel.
Price calculators for every product, cart and online payment.
Admin panel for managers: orders, prices, content and email notifications.
Docker Compose with PostgreSQL, Redis, Caddy, monitoring and nightly backups.
A site for ordering stamps and seals. Customers pick a layout from the gallery or upload their own, and the order goes straight to the workshop's Telegram.
Gallery of about 90 layouts, orders with file uploads.
Telegram notifications, rate limiting and CSP headers.
Moved from shared hosting to Docker on my server without losing orders or uploads.
Built an isolated lab from two laptops, a virtual machine and a phone, reproduced the attack and compared ways to detect rogue access points. The result is six Wi-Fi rules for people with no technical background. The work took third place at the Lomonosov Readings scientific conference in 2026.
claude-security-skills
Eight security checks for Claude Code that also run as a CI step and GitHub Action: secret scanning, Python SAST, prompt-injection tests, plus HTTP, JWT, Dockerfile, CORS and dependency audits. Standard library only. 10 contributors, 12 forks, about 375 unique cloners in two weeks.
Products, competitions and client work
3
Medical AI kiosk
A year in the R&D lab at Tyumen Industrial University (2024 to 2025, competitive admission). I fine-tuned Mistral on a clinical dataset and ran it locally through Ollama; the system reads a patient's symptoms and sends them to the right specialist without a separate referral appointment.
Suggestion bot for Admit Me
Telegram bot that takes post suggestions for the Admit Me channel: flood protection, content filtering, moderation right in the chat and scheduled publishing. t.me/admit_me
gmaster
Appliance repair service, a commercial project that has not launched yet: Flask REST API and Next.js frontend with JWT auth, input validation and security headers.
OSINT practice
4
The Case: Sakura
TryHackMe writeup: SVG metadata, finding one person across platforms, crypto wallet tracing, blockchain forensics and Wi-Fi geolocation.
Seven Minutes on the Seine
TryHackMe case about a Louvre heist: geolocating the museum entrance, artifact metadata, checking the INTERPOL stolen art database and reconstructing the escape route.
OhSINT
TryHackMe room: image metadata, social media intelligence and geolocation through Wi-Fi networks.
geoint-task #005
Located polar bears from a zoo webcam to exact GPS coordinates using reverse image search and satellite imagery.
Other
1
Astrophotography tools
Desktop tools for my own astrophotos: unsharp-mask sharpening and denoising (TV-Chambolle, kappa-sigma clipping), FITS and TIFF support.
Open source
Besides my own projects, I send pull requests to OSINT tools I use:
Username search across 3000+ sites. My fix was merged in October 2026: when the site database was loaded by URL, the request ignored the proxy setting. Two more fixes to site checks are under review.
The WHOIS library PRISM uses. For .de domains the registry appends IP addresses to the name server line, and the library returned them as part of the name; I sent a fix.
The site-check database behind several OSINT tools. I re-tested all 717 sites with real and made-up usernames and sent fixes for the checks that gave wrong results.
Contact
Email is the fastest way to reach me. I usually reply within a day.
