Skip to content
View Raoof128's full-sized avatar
πŸ€”
Reflecting
πŸ€”
Reflecting

Highlights

  • Pro

Block or report Raoof128

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Raoof128/README.md
Raouf Abedini β€” AI Security Researcher

Typing SVG

LinkedIn Portfolio ORCID Email Profile Views


Cosmic Starfield

Terminal Animation


> ./identity --singularity

╔══════════════════════════════════════════════════════════════════════════╗
β•‘  🌌  Mapping where AI capability eclipses human oversight vectors       β•‘
β•‘  πŸ“‘  "Invisible Window" Β· "Project Simurgh" β€” Research at the Horizon   β•‘
β•‘  πŸ€–  Calibrating AI for Anthropic Β· Claude Capability Evaluation        β•‘
β•‘  πŸŒ€  LLM Safety Β· Capability Uplift Β· Dual-Use Risk at Singularity      β•‘
β•‘  πŸ’»  Systems Depth β€” C/C++ Engines Β· Python Tooling Β· Swift             β•‘
β•‘  πŸ”­  Orbiting: Aion Β· SimurghForge Β· Nexus OS                          β•‘
β•‘  πŸŽ“  B.Cyber Security β€” Macquarie University Β· Nov 2026                 β•‘
β•šβ•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•


> deep-scan --sector=research --depth=∞

πŸ“„ The Invisible Window   V2.0 2026

Exploiting OS-Level Display Affinity to Bypass WebRTC Proctoring Systems

C Swift Python Win32 ScreenCaptureKit WebRTC

  • 100% screen capture evasion across Windows 10/11 and macOS 14–26 via W3C Screen Capture / OS compositing trust boundary violation β€” zero artefacts over 10,000+ frames
  • Novel finding: Apple's macOS 15 ScreenCaptureKit mitigation remains ineffective on macOS 26 β€” contradicting vendor assumptions through pixel-level forensic verification
  • Coordinated disclosure to 3 proctoring vendors (ProctorU, Proctorio, Respondus) + 2 OS vendors (Microsoft, Apple) following OWASP/FIRST/CISA frameworks
  • Documented measurable AI capability uplift and characterised intent-vs-artefact safety boundaries β€” directly relevant to ASL threshold calibration

Preprint   Zenodo

πŸ“„ Project Simurgh   Stage 2 2026

Privacy-Preserving Device Integrity Proofs for Capture-Resistant High-Stakes Sessions

Ed25519 ECDSA P-256 WebExtension Node.js Python

  • Replaces surveillance-first visual monitoring with signed, metadata-only integrity proofs β€” no screen-capture data collected at any point
  • Combines browser behavioural telemetry, local OS-metadata daemons, and Ed25519 + ECDSA P-256 cryptographic challenge-response proofs to verify session authenticity
  • Stage 2 working prototype on main: instructor risk dashboard, student privacy UI, HMAC-SHA256 tamper-evident audit chain, macOS native display-affinity scanner
  • Companion attack paper: The Invisible Window β€” the defence is designed to neutralise the exact attack class the companion paper documents

Preprint

πŸ›  Zurvan   Active

Local-First LLM-Powered Knowledge Engine β€” Markdown Wiki + Hybrid Search + MCP

Python SQLite MCP FastAPI

  • Ingests raw sources (PDF, MD, TXT, images) and extracts structured knowledge β€” claims, entities, concepts, decisions β€” into a git-diffable, Obsidian-compatible Markdown wiki
  • Three local SQLite indices: registry.sqlite (deduplication), search.sqlite (FTS5 + sentence-transformer embeddings for hybrid search), graph.sqlite (wikilink knowledge graph)
  • Exposes a local MCP server over stdio β€” Claude Code, Cursor, and Codex-style agents query it via zurvan_search, zurvan_context, and zurvan_graph_* tools; no cloud, no SDK, no LLM loops
  • Designed as a pure storage + retrieval engine: all reasoning is done externally by the calling agent β€” immutable raw sources, no fabricated citations

GitHub



> enumerate --matrix=capabilities


[ LANGUAGES ]

Python C C++ TypeScript JavaScript Swift Kotlin Bash Go   SQL

[ AI / ML ]

LLM Evaluation NLP AI Safety Generative AI

[ SYSTEMS & TOOLS ]

Linux Docker CMake GitHub Actions Cloudflare FastAPI   Google Test libpcap

[ SECURITY TOOLING ]

Kali Linux   Burp Suite Wireshark Nmap

[ FRAMEWORKS ]

OWASP MITRE ATT&CK NIST W3C Screen Capture



> probe --orbit=projects --traverse-all

βš™οΈ Systems & Security

NanoMatch   2026

C++20 CMake GTest

High-performance matching engine processing 1M+ orders/sec with sub-microsecond latency β€” red-black tree price levels, custom memory pool allocator, p50/p99 benchmarks

SentinelFlow   2026

C++17 libpcap Linux

Real-time packet processing engine parsing 500K+ packets/sec β€” protocol dissection (Ethernet/IPv4/TCP/UDP/ICMP/DNS), signature-based detection, stateful analysis

SimurghForge   WIP

Python

Universal file converter β€” batch conversion pipeline supporting multiple formats, local-first privacy-preserving document processing

πŸ€– Full-Stack & AI

Nexus OS   WIP

React 19 Tailwind v4 Zustand TypeScript

Cyberpunk browser OS β€” 4-phase windowed desktop with edge-snap tiling, app launcher, Settings / System Monitor / Notes / Terminal apps, and Aion integrated as a native windowed app

Aion   WIP Nexus OS App

React Native Supabase pgvector Gemini

AI-powered Bible companion with Agentic Hybrid RAG chat β€” keyword + semantic search over pgvector, dynamic verse cards, Perplexity-style interface grounded via Gemini 3 Flash; integrates into Nexus OS as a native windowed app (Home / Chat / Reader views via SSE Edge Functions)

Mehr Guard   2024

Kotlin Android iOS

Cross-platform offline threat detection with local ML classification β€” submitted to KotlinConf global developer conference

70+ additional public projects covering vulnerability research, systems programming, AI/ML tooling, and cloud infrastructure



> singularity-watch --builds=active

πŸ›  Project Description Stack Status
Aion AI Bible companion Β· Agentic Hybrid RAG React Native Supabase Gemini Active
SimurghForge Universal file converter Β· local-first Python Active
Nexus OS Cyberpunk desktop environment React Tailwind Active


> query --archive=education --origin

πŸŽ“ Degree πŸ› Institution πŸ“… Period
Bachelor of Cyber Security Macquarie University May 2024 – Nov 2026
Diploma of Information Technology Macquarie University Jul 2023 – May 2024

Coursework: Digital Forensics Β· Network Security Β· Systems Security Β· Cloud Computing Β· NLP & Machine Learning Β· Privacy-Preserving Data Analysis



> channel --frequency=ai-safety --decode

πŸ€– Anthropic β€” Completed AI model evaluation (Claude Code Human Preference) β€” benchmarked LLM code outputs for quality, security, correctness, and reliability

πŸ”¬ Research Directions β€” Proposed systematic uplift measurement across vulnerability classes, intent-vs-artefact safety boundary generalisation, and defensive application development to Anthropic's Fellows team

πŸŽ“ Mentoring β€” Mentored peers in cybersecurity, C/C++ programming, and systems-level problem-solving at Macquarie University



> telemetry --live --cosmos



   
GitHub Streak

Repos 70+ Research Languages Followers Years


Contribution Snake


> ./entity --walk

Alien mascot

> trace --commit-field --realtime

Activity Graph



> establish-link --protocol=singularity

> Initiating singularity link...
> Protocol   : TLS 1.3  |  Auth: Mutual
> Encryption : AES-256-GCM + Ed25519
> Target     : Mohammad Raouf Abedini β€” Event Horizon Node
> Status     : [✦] ONLINE β€” signal crossing the threshold

LinkedIn Portfolio Email ORCID


Footer

Pinned Loading

  1. invisible-window-research invisible-window-research Public

    The Invisible Window: Exploiting OS-Level Display Affinity to Bypass WebRTC Proctoring Systems β€” Research artifacts, PoC, and IEEE manuscript

    Python 4

  2. Project-Simurgh Project-Simurgh Public

    Sovereign Shield for AI integrity: capture-evasion detection, metadata-only proofs, audit receipts, and LLM consequence containment.

    JavaScript 3

  3. Syllabus-Sync Syllabus-Sync Public

    AI-native Campus OS for Australian universities β€” LLM OCR pipeline, syllabus-as-code, calendar, WebAuthn passkeys, 503 tests. Built with Next.js 16, Supabase, and TypeScript.

    TypeScript

  4. Aion Aion Public

    AI-powered Bible companion using Agentic Hybrid RAG

    TypeScript 2

  5. Nexus-OS Nexus-OS Public

    Nexus Archive β€” Cyberpunk browser OS with AI-powered media vault, email, and chat

    JavaScript

  6. divan-open-day divan-open-day Public

    DIVAN Open Day β€” offline-first Hafez & Rumi poetry experience (release-1 build; no production content/rights included)

    TypeScript