name: Carlos Alberto Aceves Cabrera
alias: Charly-bite
role: Cybersecurity Student & AI Engineer
school: Universidad de Guadalajara (UDG) — Gen 2025-A
location: Guadalajara, México 🇲🇽
focus: Building tools that blur the line between offense and defense |
- 🛡️ Researching offensive security — from stealth fuzzing to phishing analysis with explainable AI
- 🤖 Shipping production bots and automation tools powered by Gemini, Groq, Ollama & Whisper
- 🔬 Currently building: a WhatsApp AI assistant with RAG + vision, an XAI phishing detector, and ZEBRA (hardware label printer orchestrator)
- 🌱 Deep-diving into Go, MCP protocol, cloud security, and distributed computing
🛡️ Cybersecurity & Offensive Tools
| 🎣 | xai-phishing-detector | Trains Logistic Regression, Decision Tree & Hybrid Neural Net classifiers on 82K+ emails — then explains every prediction with SHAP & LIME so you know exactly which words and URL patterns triggered the flag. Ships with a Flask UI for real-time classification. |
| 🔍 | hcp-fuzzing | Distributes fuzzing jobs across Slurm HPC nodes — subdomain discovery, API endpoint probing, parameter brute-forcing, HTTP method cycling — all with adaptive rate-limiting, proxy rotation, and WAF evasion. Llama 3 auto-analyzes every log for vulnerabilities. |
| 🔐 | Password-lab | Live-deployed password security lab (try it) with real-time SHA-256 hashing, Shannon entropy measurement, blacklist detection, and animated glassmorphic demos. Final project for Programming I. |
| 🔒 | sensible-data-interactive-story | Case study on the 2016 INE electoral register leak — a Flask app with a glassmorphic login, dual SQLite/CSV storage, and deliberate PII filters demonstrating secure cloud hosting and access restriction patterns. |
| 🛡️ | QB-IDS | Intrusion Detection System (IDS) built with TypeScript to monitor network traffic, identify suspicious activities, and log potential security events. |
| 💀 | Desencript | Academic Command & Control (C2) and LAN telemetric ecosystem. Features a Rust telemetry agent with secure DNS queries (Hickory DNS), a Python C2 server running real-time YARA rule scanning, and a Chart.js dashboard mapping MITRE ATT&CK techniques. |
| 🚇 | SITEUR | Interactive security audit dashboard and attack chain visualizer for urban transit systems. Documents GLPI SQL injection bypass, Apache HTTP splitting defenses, and WAF evasion strategies via a responsive frontend with Chart.js-based MITRE mapping. |
| 🧪 | Security_Lab | Isolated and dockerized security research environment simulating target Joomla environments. Scripts automate network isolation tests, payload deployment, and evidence capture. |
🤖 AI & Automation
| 💬 | whatsapp-ai-bot | Production WhatsApp assistant with a 3-tier AI cascade (Gemini → Groq → Ollama), RAG knowledge base via LanceDB, Whisper voice transcription, vision support, SearxNG web search, 20+ commands (!download, !read, !draw, !ocr...), and a real-time Express/WebSocket dashboard. PM2-managed. |
| 🎙️ | class-notes-mcp | MCP server that records classroom audio, pipes it through a custom AMD-optimized whisper.cpp build, transcribes lectures locally, and outputs structured Markdown notes — no cloud APIs needed. |
| 🐳 | dory-lat-docker-app | Dockerized version of the XAI phishing pipeline with a modern responsive web UI — pull the image, run, and get explainable predictions without installing anything. |
🌐 Web Applications & Hardware
| 🦓 | zebra | WYSIWYG ZPL label designer that compiles drag-and-drop canvas elements (text, barcodes, QR, images) into native Zebra Programming Language and prints via raw Win32 CreateFileW USB writes — no drivers needed. Includes Excel batch-print CLI. |
| ☄️ | nasa-meteorite-madness | NASA Space Apps Challenge hackathon project — simulates asteroid impacts with real NEO/USGS data, Leaflet.js mapping, blast-wave overpressure zones, population risk analysis, and a "Defend the Earth" mode where Gemini AI generates planetary defense strategies. |
| 📊 | open-sga | School management web app with a premium sidebar dashboard, student record tracking, and grade administration. |
| 📦 | open-oms | Order management system with a dark-theme visual interface for tracking orders and fulfillment workflows. |
| 🏭 | qb-wms | Warehouse management app with tabulator data grids, custom dark styling, and real-time inventory tracking. |
| ⚙️ | QB-SAO | Centralized operations management system for Química Boss, integrating inventory control, quality certificates, and workflow automation. Built with Python. |
| 📝 | QB-Bitacora | Logging and operation audit trail application for tracking internal activities and changes across the Química Boss ecosystem. Built with Python. |
| 🛒 | Visor_Web_QuimicaBoss_Compras | Web-based visualization dashboard for the purchasing department of Química Boss, displaying purchase logs, vendor analytics, and order status in real time. |
| 📈 | Visor_Web_QuimicaBoss_Ventas | Web-based visualization dashboard for the sales department of Química Boss, tracking sales metrics, invoices, and distribution flows. |
🎮 Fun, Learning & Utilities
| 🔴 | python-pokedex | Desktop Pokédex with a borderless Tkinter window replicating the original device — animated pulsing LEDs, PokeAPI search in Spanish, local collection with cache, and expandable panels. |
| 🏛️ | laberinto-asterion | Interactive Minotaur labyrinth game inspired by Borges — ASCII art CLI version with ANSI colors and a web terminal replica via Flask. Multiple endings based on combat strategy choices. |
| 🧙 | merlin-powershell | Cross-platform PowerShell orchestration toolkit for environment setup and configuration management. |
| ⛏️ | minecraft-server | Pre-configured Minecraft server template with optimized JVM args and startup scripts. |
| 📄 | sd-node | Distributed VM cluster orchestration using Multipass, Redis, and Python workers. |
| ☁️ | proyecto-integrador-aws | Multi-cloud infrastructure index with AWS service integration and deployment guidelines. |
| 📖 | til | Today I Learned — A collection of daily notes, code snippets, and short articles tracking my learning journey in Cybersecurity, AI, and Software Engineering. |
| 🎼 | Orchestrator | PowerShell-based local service lifecycle orchestrator. Automates starting, polling, health-checking, and stopping custom microservices and local AI APIs (SGA, OMS, Lunoto, Ollama, NetBox) via port-monitoring routines. |
"In cybersecurity, the only true constant is the evolution of the threat."