Application security
VAPT and web application testing against the OWASP Top 10, with findings reported through coordinated, responsible disclosure.
About the builder
I build the tools that break things.
I'm rxdsec — a cybersecurity practitioner working in VAPT, web application security testing and AI red teaming. REX is what came out of doing that work by hand and wanting an agent that would help without ever acting behind my back.
2+years in security
8public repos
42tools shipped in REX
23providers wired
Practice
Three things that keep turning out to be one.
AI red teaming
Evaluating LLM behaviour across GPT, Claude and Gemini against the OWASP Top 10 for LLMs, so unsafe output is caught before it ships.
Digital forensics
Evidence extraction, triage, log analysis and email investigation down to SPF, DKIM and DMARC — then a report someone can act on.
Selected work
Two flagships. Six more repos.
001
REX
A local-first AI agent with 42 tools, 23 providers and a permission gate that can't be talked out of a denial.
002
Rex Browser
An AI browser with the REX agent built in — ad/tracker blocking, malware and phishing protection, HTTPS upgrades and verified updates. Browsing is free; the agent uses your rxdsec account.
003
AiPentestFramework
AI-assisted security assessment automation for web targets.
004
RXDSEC-CLI
The command-line side of the toolkit — one entry point instead of a folder of scripts.
005
Bluedos
Bluetooth security research for lab use.
006
rootmaster
Linux system tooling — the repo on the profile with an outside fork.
007
airmobile
Wireless security research, extending the toolkit past Bluetooth.
008
simplebtcbot
A small automation bot — the most recent push on the profile.
Toolkit
What I work with.
Security testing
Tools
AI security
Forensics and defence
Scripting and platform
Building
Contact