Native Android Engineering
Modern performant apps with MVVM, Clean Architecture, Coroutines & Flow, Compose, Room, Hilt and Ktor.
Haptify · callrecorder-gui
Android · Security · Agentic AI
Your phone deserves more Intelligence.
Not your boring
app showcase
app showcase
Hardened Android apps, kernel drivers, and exploit research — designed, built, and battle-tested solo.
340+stars on NewBlackbox
8+shipped open-source tools
50+critical flaws found
4+ yrsnative Android & security
Build across apps, security and AI.
End-to-end native systems: high-performance apps, sandbox engines, kernel tooling and on-device AI.
Security Research & Pentesting
Static/dynamic analysis, Binder IPC audits, SSL-pinning and integrity bypasses — plus kernel exploit research.
GhostLock · 15+ apps audited
Bots, Panels & Tooling
Telegram AI bots, self-hosted web panels and dev portals — Python, Node, React and Next.js in production.
ggqtbot · Obsidian-Panel
Latest from work.
Flagship builds with real users and real stars. Full code lives on GitHub.
Kotlin · C/C++ · AIDL · ARM64
NewBlackbox
Userspace sandboxing engine, Android 5.0 to 14.0+. Rootless app cloning with virtual identifiers and file systems.
340+ stars · 180+ forks
Open repo → Node.js · React · MongoDB · Docker
Obsidian-Panel
Self-hosted Minecraft server panel. Live Socket.IO console, Monaco file manager, cron backups, plugin store, RBAC.
Express · Socket.IO · 175 commits
Open repo → C · ARM64 · Linux Kernel
wanbai-driver
Custom Android kernel memory driver. ioctl interface for external process R/W, debuggable via dmesg, panic-traceable via pstore.
Kernel module · EL1
Open repo → C++ · KittyMemory · ioctl
kitty-memory-ioctl
External Android game memory framework on a custom wanbai kernel driver. Read/write process memory via ioctl.
Kernel driver · game security
Open repo → Kotlin · AudioCapture · Vibrator
Haptify-android
Turns on-device playback into live haptics. AudioPlaybackCapture + MediaProjection, adaptive voice/beat engine, QS tile.
Foreground service · M3
Open repo → Kotlin · Compose · M3
callrecorder-gui
Material You companion player for BCR recordings. Floating player, private recycle bin, advanced filters, AMOLED dark.
minSdk 23 · targetSdk 37
Open repo → Next.js 15 · Turso · REST
SDKHub
Portal + API for Android NDK/SDK packages across 22 Google feeds. Deduplicated indices, CDN redirects, CLI-ready endpoints.
LibSQL · CORS API
Open repo → Next.js · TypeScript · MongoDB
online-mongodb-compass
Compass in the browser. Stateless multi-tenant MongoDB manager; credentials stay in your IndexedDB, deploys to Vercel.
Stateless · one-click deploy
Open repo → One engineer, production-grade systems.
No agencies. Direct scope, fast proof-of-concept, hardened delivery.
Live // Discord Connecting
Linking Discord presence…
2020 — Present
Lead Android Security Researcher & Open Source Developer
Self-employed / Open source · Kolkata, India
- NewBlackbox sandbox engine across Android 5.0–14.0+
- Custom ARM64 inline-hook library in C++ and assembly
- KernelSU contributions and KPM hotpatch drivers
2024 — Present
Full-stack & Bot Developer
ArtRuntime org · Kolkata, India
- Obsidian-Panel: Node/React server panel with RBAC + Docker
- ggqtbot: Telegram AI bot with premium tiers + OpenRouter
- Browser MongoDB manager, SDK portal, haptics apps
2018 — Present
Independent Penetration Tester & Reverse Engineer
Freelance security audits · Kolkata, India
- 30+ apps reversed, Xposed hooks sped testing 40%
- 50+ critical flaws across Binder, storage, crypto
- 25+ bypass scripts, setup time down 60%
Arsenal, grouped by job.
Languages
Java · Kotlin · C/C++ · ARM64 Asm · Python · TypeScript · SQL · Bash
Android
MVVM · Clean Arch · Compose · Coroutines/Flow · Ktor/Retrofit · Room · Hilt · WorkManager
Security
Frida · JADX · IDA · Ghidra · OWASP Mobile Top 10 · Pinning bypass
Kernel Exploitation
futex/rtmutex · UAF analysis · cred struct · KPM hotpatch · page tables · cache ops
Web & Backend
Node.js · Express · React 18 · Next.js 15 · Socket.IO · Tailwind · Monaco
Bots & Automation
Pyrogram · Bot API · OpenRouter/LLM · inline mode · cron schedulers
Data
MongoDB/Mongoose · Turso/LibSQL · IndexedDB · Room · REST API design
DevOps
Docker/Podman · Compose · GitHub Actions · Vercel · RBAC · bcrypt sessions
Internals
NDK/JNI · Zygote · Binder/AIDL · ART · SELinux · KittyMemory · ioctl drivers
Research interest
Kernel exploits, studied for defense.
Tracking modern Linux/Android LPE chains — root-cause analysis, patch diffing and detection, never weaponization.
CVE-2026-43499 · GhostLock
rtmutex UAF → root + container escape
Futex PI proxy-lock rollback clears pi_blocked_on on the wrong task, leaving a dangling waiter. Unprivileged LPE in-tree since 2011, fixed in 7.1.
Futex / rtmutex internals
Priority inheritance under the microscope
FUTEX_CMP_REQUEUE_PI paths, waiter queues, deadlock rollback — the exact machinery GhostLock broke.
Android attack surface
Binder, io_uring, GPU drivers
Following the mobile-relevant primitives: UAF → cred overwrite, KPM hotpatch detection, SELinux policy gaps.
Questions, answered.
What do you actually ship?
Native Android apps, sandbox/virtualization engines, hooking libraries, Telegram bots, self-hosted panels — and audit reports with reproducible builds.
Do you work with root-only setups?
No. Most tooling targets non-root runtimes; kernel work is isolated to test devices with safe remapping.
Exploit research — offensive or defensive?
Defensive. I study chains like GhostLock (CVE-2026-43499) for root-cause analysis, patch diffing and detection — audits and hardening, not weaponization.
Can you audit our app?
Yes. Static plus dynamic analysis covering IPC, storage, crypto and integrity checks, with fix guidance.
How do we start?
Message on Telegram with scope and timeline. Small proof-of-concept first, then full engagement.
No agencies. Just one engineer.
Get in touch.
Open to collaborations, audits and open-source work. Send scope and timeline.
ishowlinux@outlook.com