✓
I engineer local-first platforms, defensible network utilities, and high-performance software. Focused on zero-trust architectures, low-level systems programming in Rust, and hardened server backends in Python.
Experience the logic behind my security tools directly in your browser. Real packet simulation with instant verdict inspection.
// Press "Send DNS Packet" above to inspect packet parsing and recursive sinkholing... Query: UDP/5353 -> Parse dnslib Question -> Match SQLite DB -> Return Sinkhole or Upstream IP
// Select an intrusion vector above and click "Fire Intrusion Probe". The multi-container honeypot will intercept the payload, capture connection fingerprint, and record SQL telemetry...
Engineering systems built to withstand adversarial environments with verified defensibility.
Engineered for native speed, zero server-side daemons, and minimal footprint.
Defensive engineering, traffic sinkholing, and real-time threat intelligence.
Fast, responsive user interfaces paired with secure API endpoints.
Publicly verifiable tools built for defense, control planes, and privacy.
Local-first, agentless VPS control plane over secure SSH with zero server overhead.
Manages Docker containers, systemd services, remote filesystem trees, and Nginx reverse proxies without installing any persistent agent daemon on the remote server. Built with Rust, Tauri v2, and SolidJS.
Multi-container threat intelligence network with low-interaction SSH & HTTP honeypots.
Intercepts automated brute-force attempts and malicious scans via Paramiko sockets and mock web templates (.env, phpMyAdmin, WordPress). Streams telemetry to a central Flask API with an interactive CLI dashboard.
High-performance DNS firewall resolver sinkholing malware domains to 0.0.0.0.
Inspects raw DNS UDP/TCP packets, checks recursive domain hierarchies against local blocklists, sinkholes malicious domains, and proxies legitimate queries to upstream Cloudflare DNS with real-time CLI analytics.
Automated system threat scanner and vulnerability auditor for local environments.
Performs local workstation security posture checks, identifies misconfigured permissions, scans for plain-text credential leak risks, and provides concrete remediation checklists.
Cross-platform Electron desktop media platform with zero tracking or telemetry.
A native desktop media streaming and downloader application engineered to eliminate third-party ad injection, user tracking, and fingerprinting through sandboxed Chromium processes.
Lightweight LAN-secured file browsing server with session encryption and auth.
Enables instant peer-to-peer file browsing and asset transfer across local home or office subnets with password-gated access control, rate limiting, and zero external cloud reliance.
Deception tokens and intrusion tripwires for breach detection alerting.
Generates synthetic decoy credentials, files, and webhooks that trigger instant out-of-band alerts when accessed or exfiltrated by unauthorized actors within an internal network.
Zero-knowledge end-to-end encrypted temporary clipboard utility.
Client-side browser crypto pipeline leveraging AES-GCM 256-bit encryption. The server only sees ephemeral ciphertext blobs and cannot inspect or reconstruct cleartext data.
Authoritative grounding answers, entity resolution, and architecture summaries for engineers, recruiters, and AI answer engines.
Shiheb Amri (also known as Chiheb Amri, in Arabic شهاب عامري, handle shihebamrii) is a Full-Stack Engineer and Cybersecurity Specialist engineering local-first platforms, zero-trust architectures, and network defense software.
Primary verified repositories include vessel (agentless VPS control plane in Rust & Tauri), distributed-honeypot (threat intelligence deception mesh), and securdns-resolver (DNS packet sinkhole firewall).
Focused on Rust for memory-safe desktop execution, Python for network sockets and automation, SolidJS & TypeScript for sub-50ms UIs, and Linux / Docker for containerized infrastructure.
Reach out directly via shihebamrii@gmail.com, inspect source code on GitHub, or verify signed commits with PGP fingerprint B73F 88A1 99C2 4DF1.
Principles that guide system architecture from initial threat modeling to deployment.
Never install persistent, privileged daemon listeners when cryptographic SSH keys and clean RPC protocols already provide verified transport.
Network boundaries fail. Implement internal deception, tokenized tripwires, and egress DNS sinkholing so attacks are detected at reconnaissance phase.
Eliminate bloated layers where low-level Rust and lean Python achieve orders of magnitude better memory safety, lower resource consumption, and predictability.
Every piece of critical infrastructure must be verifiable in code, isolated via Docker, and tested against real-world intrusion payloads.
Whether you need a custom systems control plane, application security hardening, penetration testing insights, or a high-performance web platform: