Projects

ProxyPot was initially a C++ project written by a colleague, with a Go wrapper around it for API and management functionality. But as the project grew and the organization’s requirements changed, it became necessary to rebuild the entire project in Go, merging the two separate components into a single streamlined binary.

I wrote the entire Go version from scratch, supporting additional protocols over its predecessor (FTP/S, HTTP/S, SSH, Telnet), while capturing decrypted packets as PCAPNG files for future analysis, and more importantly carrying a minimal footprint allowing for deployment on any infrastructure.

Capable of being deployed as a standalone installation or as a global cluster deployment, ProxyPot continues to be operated at the global scale for the Global Cyber Alliance, capturing incredibly valuable attack data for analysis.

The Domain Security Scanner is a CLI tool with both a REST API and email entrypoint. It scans given domains for various DNS records (primarily email security), then provides an evaluation and advice on steps to take to better secure your domain:

My primary focus project at the Global Cyber Alliance over the last 6 years is an internal honeypot technology called ProxyPot. As part of this technology, we needed to accept connections over Telnet, and present a realistic shell environment for attackers to interact with. The library below doesn’t include the shell environment, but does handle the protocol itself. This was forked from another project, but was significantly refactored to bring the library up-to-date (the last commit on the original repo was 7 years ago), make the API easier to interact with (aligning it with the standard library’s HTTP implementation), and support our internal use-case:

As part of maintaining the MANRS initiative, we needed a Go RPSL parser for processing millions of route objects daily over six years of data. We found an excellent library, but encountered out-of-memory issues during large-scale processing.

Using pprof profiling, we identified that the library’s parseObjects function was holding string references longer than necessary, preventing garbage collection. What started as a memory leak fix became a comprehensive performance optimization.

Key Improvements:

• Fixed memory leak by reworking string parsing logic
• Added ParseManyFromReader for efficient streaming parsing
• Implemented byte-based parsing to avoid unnecessary type conversions

Performance Results:

• Parsing speed: 1313 ns/op → 760.8 ns/op (42% faster)
• Memory allocations: 35M objects → 17M objects (51% reduction)
• Our project’s memory usage dropped from 60GB to 27GB with streaming

The optimizations make the library ideal for applications processing large RPSL datasets while maintaining full API compatibility.

DirectAdmin is a web hosting control panel, which my own software and hosting company Level Zero Technology relies on. This library provides a clean API for interacting with the DirectAdmin REST API (and it’s various quirks).

I refactored the majority of this library to enforce consistency and remove code duplication.

I made several contributions to the FOSSBilling project, namely to refactor document a few aspects of the project, and to further support DirectAdmin as a hosting panel.

Satisfactory is a factory building game. Prior to their official dedicated server support, I wrote a Dockerized implementation of the game client to serve as a server. I rewrote the Dockerfile to use their official server implementation the day they released it. This is still the most popular Docker implementation for the game, with 2.6M Docker pulls.