You are browsing as a guest. Sign up (or log in) to start making projects!

kingvon

@kingvon

Joined May 31st, 2026

  • 58Devlogs
  • 6Projects
  • 4Ships
  • 72Votes
cybersec dude man, building shit
Ship Pending review

Big Brother, a tiny self-hosted SOC for linux

this is a very lightweight SIEM/SOC for linux with agents that are only 6mb in size, if you compare that to more common systems like Wazuh which has agents big as hell upto 2GB per system!!!!

this is an MVP (v0.1.0) that is only made for experimental and learning purposes right now, it can work on production environment but it is not recommended to use it, cuz it has no auth and some other factors (read “security” in readme)

it can detect process events and auth (ssh) events right now, with built in rule and detection engine where you create rules right there in dashboard instead of YAML stuff

very easy to setup, one docker compose on dashboard system and one line script for agent hosts, with a demo python script that can fake some detections too.

watch the youtube video demo and have fun! ik its a bit fast sorry lmao realised it too late that i went too deep into “no one gonna watch a long ahhh video for voting” 😭

  • 28 devlogs
  • 45h
Try project → See source code →
Open comments for this post

1h 7m 13s logged

Better process filter, Bug fixes, Demo video

so lot of things in this actually

Better filter

now it filters more garbage random telemetry bs :sk:

Config file priority

forgot to check system-level config when running lilbro directly, fixed that, now checks system level config then per-user config

demo video

none of you gonna run this entire thing to test ik thats why made an entire yt video

some bug fixes

in heartbeat reqeust sending


possibly ready to ship :yay:

0
0
9
Open comments for this post

1h 5m 46s logged

README update

big ahh readme

PLEAS PLEASE dont reject my ship cuz of “AI genreated readme” bruh i wrote this shit 😭 except an ASCII diagram which i commented out cuz i am afraid that will just get it rejected, not gonna take a risk :sob-ios:

so it has screenshots and all, and soon a youtube video demo too

0
0
14
Open comments for this post

1h 14m 27s logged

scripting and releases stuff

install.sh and demo script ofc, also the github workflows, so it has a couple workflows to build and publish the backend and dashboard docker image, and one more workflow to build lilbro binary, which the installer script will install, very simple

gonna make the readme and stuff now ig

0
0
13
Open comments for this post

50m 28s logged

Changed how lilbro binary works

so uhh to make the installer script properly automate stuff and also the demo script that i am planning, i have to make the binary “script-able” so it will now have flags like -server and -id
very simple stuff

0
0
6
Open comments for this post

1h 31m 51s logged

Webhooks

lemme hook yo ahhh
so i implemented webhooks, 3 types:

  1. generic - your site
  2. discord
  3. slack app

now it can send webhooks upon detection
it also masks the webhook URI on Ui, its also gonna show a list of paste webhook fires :33:


uhh so one problem is that on slack detection id like #1 makes it a channel reference, idk how to fix that, i DONT want to have space like “# 1”, i tried \ but it didnt work on slack, so its a todo for now

0
0
36
Open comments for this post

33m 54s logged

Smol rule page

/rules/id shows you the rules details (with a human like summary too) and you can edit the rulle from there

yeah thats it in this :33:

0
0
5
Open comments for this post

52m 4s logged

Real stats for agent monitoring page

replaced the mock bs with actual stats, things it will show:

  1. events (24h)
  2. detections (24h)
  3. processes (24h) <— thinking of removing ts tbh, but i kinda want some kind of process info on stats, lets see
  4. total events
  5. last seen

Seeding db with default rules

yeah last attempt had bugs so did it properly this time, and made some fields case-insensetive cuz i was getting stuck and it was annoying

0
0
10
Open comments for this post

1h 22m 30s logged

hello, i am back on this

damn its been 4 months, cant leave 37 hours of efforts lol gotta ship it before stardance ends

Bug fixes and some hardening

so i left a file mid-work months ago cuz of burnout, so it was hard to figure out what i was doing
there were some things that was crashing the rule engine, so worked on that and now a single bad rule cant stop others and every rules fires idendently on same event, before this a rule could fire on an event and no other rule will try even if its matching
_
and moved event filtering to server side, i was doing this 4 months ago but quit last time


oh and yes i am using AI a bit to help me make it shippable, but i am going to respect the 30% rules, right now its much much much less than that (<1 hour)

0
0
7
Ship ✨ Blessed

Basic Calc in x86_64 Assembly

wanted to learn assembly so wrote this, its not a full fledged calc but it does support somethings

supports + - * /
only linux
_
checks for invalid op, invalid digits, empty input, negative output, divide by zero, u64 overflow


check readme and build from source

  • 5 devlogs
  • 5h
  • 1.73x multiplier
  • 11 Stardust
Try project → See source code →
Open comments for this post

1h 55m 44s logged

Multiple shi

did a lot of lil things, just wanted to complete this and ship to get 3 stardust so i can get the buds
_

things i did:

  1. added negative number guard
  2. added invalid number check
  3. added operation check
  4. added u64 overflow check
0
0
15
Ship ✨ Blessed

a smol app that searches NASA Kepler telescope data for signs of an exoplanet.

it takes a star catalog ID and fetches years worth of brightness data, cleans and detrends the signal and runs a built from scratch Box Least Square algorithm to look for periodic dimmings that indicate a exoplanet passed in front of its host star.

and from that dip it calculates more data like orbital period, transit duration, physical size relative to earth, and also flags the confident of detection.

and PLEASE, i am begging you if you dont understand how any of this works just test against the given “try these” lol, and have patience while it loads since its a built-from-scratch scientific algorithm made for learning purposes.

  • 10 devlogs
  • 18h
  • 14.49x multiplier
  • 307 Stardust
Try project → See source code →
Open comments for this post

32m 55s logged

Moved to JSONL keystrokes output

cuz the previous one looked good but it was not the best when it comes to parsing lol
now it stores like this:
{"ts":"2026-10-02 08:27", "window":"*Untitled - Notepad", "keys":"[RETURN][RETURN][RETURN]"} and stuff

i am not using any json library for this, hardcoded some json escape characters too to protect against keys like "

0
0
17
Open comments for this post

2h 45m 27s logged

Storing key logs in temp file with some info

hell yeah we can consider this a proper keylogger already, now its not printing in console but it creates a file in temp dir, named MicrosoftUpdate-ipc.tmp (muehehehe) and saves the strokes there in format:

[date time] [window name]
key presses

this took a lot of time, got a lot of problems like proper function and shared state so i can append the key presses string in main file and save the text, and also handling special keys like CTRL, and also about safely reading and modifying the same buffer at same time so i had to lock the buffer too that was a pain cuz its my first time in windows API :cwy: and weird data types too

_
it does NOT send anything yet

0
0
43
Open comments for this post

38m 9s logged

Receving key presses

pls dont judge, first time making stuff for windows lmao
i have only made malwares for linux
_
anyways, i used SetWindowsHookEx to set a “low level keyboard hook” which gets key stroke through out the system (with some security exceptions)

this genuinely weirded me out that we can get key strokes almost system wide without even needing admin lol

0
0
11
Open comments for this post

1h 9m 38s logged

TESS and K2 missions dont work, i am sorry

:sob-ios:
its been 5 days i didnt get time to code properly but what i know is that i cannot add support for TESS and K2 for now.
_
i tried everything which i can for now, K2 fires its thrusters every 6 hours to correct its position and that thruster fire overpowers the star transit, i tried increasing period_min and increasing it enough did lead to getting correct period but that was only posible cuz i already knew the period of the star i was testing on, from what it looks like i think just rolling median in detrending isnt enough for K2 mission stars, and i am not planning to implement the corrections it requires for now
_
TESS had 2mins candence so it had over 1 million data points and in multiple loops it lead to taking hours to analyse, and my BLS double pass scales too much with data points, but i binned it like i did for the plot but even with that it took around 18 minutes to run and produced a 24x period which was an alias, idk how the alias array didnt even include the normal alias, maybe because the period is less than 1 day and my algo searches between period_min and max and min was set to 1.
that tells about the problem but it kinda proves that my system finds period based on what you feed into it in some values which i need to work on, cuz some stars can be weird, and wont lie i am giving up on it for now.

0
0
11
Open comments for this post

36m 12s logged

Advanced options in search

finally added period min, period max, and mission selection in search, ez
but looks like i should use shadcn buttons instead the advanced options button doesnt look like a button lowk

0
0
25
Open comments for this post

1h 21m 35s logged

Result card rework

shiii i made it hella good now
it has a nice border and tooltips for each metric, and a verdict explaination in a details summary tag
also remved the basic confidence display cuz it wasnt telling anything, now it has explaination

0
0
10
Open comments for this post

1h 34m 5s logged

Better scoring and Confidence levels

pain in ASS bro


so i started from a normal scoring system which worked fine for finding periods but it wasnt good for confidence factors cuz it scales with dataset, so a bigger data set despite having no period will still have better score than a smaller data set with a period, so i need a better scoring system

Signal-to-Noise Ratio

this idea came while i was soldering a jammer i am working on lol
so i measured the ratio and replaced the basic system with depth / (noise / sqrt(n_in)) it is not the perfect SNR system but it works nice enough.
_
so i tested it against KIC 8462852 which does not have any exoplanet, and the signal was still wrong cuz this star (Tabby’s star) is a bit weird and it has large periodic dimming events and it was long enough on a single candence on various points to score high enough on SNR and look like a strong signal, so that made it clear that SNR isnt alone enough

Coverage-Ratio check

THIS finally passed every test, it clusters in transit points between time gaps so a bigger time gap will make a new occurence, and it counts those occurances, the tabby’s star had only 2 so i made the limit 5, the “transit” must occur more than 5 times to be qualified for SNR check, which worked good and finally i got WEAK signal on that star check.

0
0
5
Open comments for this post

2h 14m 14s logged

Minimal UI work (functional)

made this very simple search thingy, it was easy asf
i used recharts to plot that, which was the real pain cuz the data has 60k+ points to plot and it was taking too long but most of those points werent nececssary so i made smaller bins of those points and plotted them which worked fine
__
i am yet to work on the confidence score, i dont have enough observations to decide on a “good enough high score” so thats a todo for now
__
and variables like mission, period min, and period max are also a todo for now :3

0
0
4
Loading more…

Followers

Loading…