mimmocrazy

8 items721K in disk

NameKindSizeLast Modified
Aboutdocument1KOct 2026
Routemap5 stopsOct 2026
Projectsfolder8 itemsOct 2026
CVdocument1 pageOct 2026
System Folderfolder18 itemsOct 2026
readme.txttext2KOct 2026
whoamitext1KOct 2026
Emailaddress——
.flag.txttext70 bytesOct 2026

About

Domenico Del Giudice

M.Sc. student in Cybersecurity Engineering at UniCal. I play attack/defense CTFs, co‑founded Calabrute, and write the tooling my team runs in competition.

My B.Sc. thesis put an industrial honeypot on macOS and attacked it over Modbus, to see what an OT defender actually gets to see. Network analysis is where I am most at home: Wireshark, Suricata, iptables, and whatever the traffic says.

Portrait of Domenico Del Giudice, dithered to 1 bit
me.pict

Projects

8 cards3 featured1 locked

  1. Featured

    Social Exposure Analyzer

    Python, React, 2026

    An OSINT engine that measures how exposed a person is to social engineering.

    120
    sites checked in parallel
    5,617
    lines, Python and React
    Azure
    App Service, private PostgreSQL

  2. Featured

    ADele

    A/D CTF framework, Jul 2026

    The attack/defense framework my team ran at the CyberChallenge.IT final.

    89
    of ~200 commits mine
    3
    traffic analysers, one dashboard
    1
    .env for the whole stack

  3. Featured

    Ginseng

    Python, systemd, 2026

    Keeps a Linux laptop awake with the lid closed, and answers to my phone.

    1,793
    lines, Python and systemd
    10%
    battery: below it, it lets go
    85 °C
    for 3 minutes: it lets go

  4. command-got-found

    Python, shell hook, 2026

    When a command is missing, it gives you the exact command that installs it.

    127
    the only exit code it wakes on
    6
    package sources checked
    517
    lines

  5. ANN search

    C and x86 Assembly (SSE, AVX), Nov 2025

    Approximate nearest-neighbour search, distance kernels written in SIMD Assembly.

    5,255
    lines, C and x86 Assembly
    SSE, AVX
    kernels by hand
    UniCal
    team project

  6. Industrial honeypot

    B.Sc. thesis, OT security, Mar 2025

    My B.Sc. thesis: an industrial honeypot on macOS, attacked over Modbus.

    T-Pot
    adapted to macOS
    Conpot
    playing a PLC
    Modbus
    attacks, seen from the defence

  7. xcol

    shell tool, Bash and awk, Aug 2026

    Pick a column from any command's output and act on it.

    389
    lines, Bash and awk
    0
    dependencies
    fzf
    picking, ranges, dry runs

  8. Calabrute infrastructure

    network and automation, Oct 2026

    Infrastructure, network and automation for Calabrute.

    private
    locked until the launch
NameKindSizeLast Modified
Social Exposure AnalyzerPython, React5,617 lines2026
GinsengPython, systemd1,793 lines2026
command-got-foundPython, shell hook517 lines2026
ADeleA/D CTF framework89 of ~200 commits mineJul 2026
xcolshell tool, Bash and awk389 linesAug 2026
ANN searchC and x86 Assembly (SSE, AVX)5,255 linesNov 2025
Industrial honeypotB.Sc. thesis, OT securityT-Pot, ConpotMar 2025
Calabrute infrastructurenetwork and automationprivateOct 2026

Route

5 stops2 lines1 interchange

StudyCompetitionBolognaB.Sc. Computer Engineering, 2021–2025UniCalM.Sc. Cybersecurity Engineering, 2025–CyberChallenge.IT finalNational finalist, July 2026RootRunnersCTF team, since July 2026CalabruteCo-founder, October 2026

  1. 2021–2025

    Bologna

    B.Sc. in Computer Engineering at the University of Bologna. Thesis: an industrial honeypot, T-Pot and Conpot, on macOS.

  2. 2025–

    UniCal

    M.Sc. in Cybersecurity Engineering at the University of Calabria, back home.

  3. July 2026

    CyberChallenge.IT final

    National finalist. I ran the A/D infrastructure and the automation, and patched web services during the game.

  4. July 2026–

    RootRunners

    CTF team, jeopardy and attack/defense.

  5. October 2026

    Calabrute

    Co-founder of a team of Calabrian penetration testers. Infrastructure, network, automation.

CV

Domenico Del Giudice

github.com/mimmocrazyLinkedInEmailCosenza, Italy

Education

2025–
M.Sc. Computer Engineering, Cybersecurity University of Calabria (UniCal), Cosenza
2021–2025
B.Sc. Computer Engineering University of Bologna (UniBo). Thesis: an industrial security honeypot

Competitions and teams

2026
CyberChallenge.IT, national finalist A/D infrastructure and automated tooling; found, exploited and patched web vulnerabilities in the final
2026–
RootRunners CTF team, jeopardy and attack/defense
2026–
Calabrute Co-founder: infrastructure, network, automation

Projects

2026
Social Exposure Analyzer OSINT and social engineering risk scoring; FastAPI, React, Azure
2026
ADele A/D CTF framework used in the CyberChallenge.IT final
2025
ANN search C and SIMD Assembly (SSE, AVX)
2025
Industrial honeypot T-Pot on macOS, Conpot, Modbus attacks

Skills

Network and security network analysis, OSINT, OT/ICS, web, binary and crypto (CTF), vulnerability assessment
Tools Wireshark, Suricata, Nmap, iptables, T-Pot, Conpot, GDB
Languages C, Python, Bash, Assembly, Java, JavaScript and React, SQL, MATLAB
Spoken Italian (native), English (B2)

System Folder

18 itemstools first

NameKind
Wiresharknetwork analysis
SuricataIDS
Nmapscanner
iptablesfirewall
T-Pothoneypot platform
ConpotICS honeypot
GDBdebugger
Clanguage
Pythonlanguage
Bashlanguage
x86 Assemblylanguage, SSE and AVX
Javalanguage
JavaScript, Reactlanguage
SQLlanguage
MATLABlanguage
Linuxsystem, Debian and Ubuntu
macOSsystem
Windowssystem

readme.txt

The type

The window chrome is set in Scambio, a bitmap face drawn for this site: 99 glyphs, 2 KB, one glyph pixel to every screen pixel, so it stays sharp. The text you read is Overpass.

The pictures

Screenshots are dithered with Bill Atkinson’s algorithm, the one MacPaint used. The colour version is downloaded only if you ask for it.

The weight

721K in disk, measured when the page is built. No framework, no tracker, no cookie: one stylesheet, one script, a strict Content-Security-Policy.

Without JavaScript

Every icon is a link and every window opens on its own. The route draws itself only if your system allows motion.

Not a Mac

The grammar is System 6 (1988), the pixels are mine. Not affiliated with Apple.

And

Some things only happen if you wait. Others only if you look for them: hidden files are hidden, not gone.

whoami

mimmocrazy

uid=1000(mimmocrazy) gid=1000(calabrute)
groups=1000(calabrute),27(sudo),1001(study),1002(competition),1003(rootrunners)

Domenico Del Giudice, Cosenza
network and systems security; attack/defense CTFs

.flag.txt

You listed the hidden files. One more step:

bWltbW9jcmF6eXt5b3VfcmVhZF90aGVfZG90ZmlsZXNfc29fd2Vfc2hvdWxkX3RhbGt9

base64, of course. If you decode it, write to me and say so.

Trash

4 itemsthrown away

About This Site

mimmocrazy

Built 25 Oct 2026. Hand-written HTML, CSS and JavaScript.

Total in disk: 721K

  • HTML180K
  • CSS39K
  • JavaScript37K
  • Fonts40K
  • Pictures424K

Control Panel

Colours

the loud one in front, a cool blue for the details

The first colour marks the window in front and what leaves this site; the second, the small things you touch.

Social Exposure Analyzer

6 picturesPython, React5,617 lines

Social Exposure Analyzer

An OSINT engine that measures how exposed a person is to social engineering.

120
sites checked in parallel
5,617
lines, Python and React
Azure
App Service, private PostgreSQL
Start a scan: a username or a profile, and which sensors to use.
1 of 6 Start a scan: a username or a profile, and which sensors to use.
The live log while the modules run.
2 of 6 The live log while the modules run.
The risk index, and how it breaks down.
3 of 6 The risk index, and how it breaks down.
Personal data found, each with its source and confidence.
4 of 6 Personal data found, each with its source and confidence.
Pictures read by OCR and by the vision model.
5 of 6 Pictures read by OCR and by the vision model.
The AI assessment, and the mitigation plan.
6 of 6 The AI assessment, and the mitigation plan.

What it does

  • Starts from a nickname, deduces the real name, then collects: search-engine dorks, Holehe across 120 sites in parallel with asyncio, Instagram and Facebook.
  • Reads the pictures too: EasyOCR for the text in them, and a multimodal model for what a caption never says.
  • Checks leaked passwords against XposedOrNot and turns everything into a deterministic score per area: identity, network, routine.
  • Strips images before any cloud AI call, and puts a circuit breaker around every source, so one dead site does not stop a scan.

How it is built

React on Azure Storage, FastAPI on App Service, PostgreSQL on a private virtual network, images through Azure Container Registry and GitHub Actions. University project, UniCal.

The target in the pictures, marco_rossi_sec_99, does not exist.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

ADele

A/D CTF framework89 of ~200 commits mine

ADele

The attack/defense framework my team ran at the CyberChallenge.IT final.

89
of ~200 commits mine
3
traffic analysers, one dashboard
1
.env for the whole stack
diagram: to draw

What it does

What my team ran at the CyberChallenge.IT final: traffic analysis (Caronte, Tulip, Pkappa2), an exploit farm, a TLS proxy, Suricata rules, all from one .env.

How it is built

A/D CTF framework; 89 of ~200 commits mine.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

Ginseng

2 picturesPython, systemd1,793 lines

Ginseng

Keeps a Linux laptop awake with the lid closed, and answers to my phone.

1,793
lines, Python and systemd
10%
battery: below it, it lets go
85 °C
for 3 minutes: it lets go
The dashboard, over Tailscale.
1 of 2 The dashboard, over Tailscale.
The Telegram bot: status and controls.
2 of 2 The Telegram bot: status and controls.

What it does

  • Holds systemd-inhibit locks at run time: nothing in logind.conf changes, and quitting restores normal sleep at once.
  • Auto-guard: stays awake while chosen processes run (python3, cargo, docker) and lets go when they finish.
  • Fails safe: it releases the lock below 10% battery, or when the CPU stays above 85 °C for three minutes with the lid shut.
  • A dashboard over Tailscale, and a Telegram bot that answers one user id only.

How it is built

I wrote it so training runs and compiles keep going when I close the lid and walk away.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

command-got-found

1 picturePython, shell hook517 lines

command-got-found

When a command is missing, it gives you the exact command that installs it.

127
the only exit code it wakes on
6
package sources checked
517
lines
searchsploit is missing: one keypress installs it.
1 of 1 searchsploit is missing: one keypress installs it.

What it does

  • Runs only on exit code 127: zero cost on every command that works.
  • Checks each APT suggestion against the local apt-cache, so it never proposes a package that does not exist. Also Snap, Cargo, Go, Pipx and GitHub releases.
  • Fixes typos on the spot: gti becomes git.
  • Only the missing command's name leaves the machine: never the arguments, paths, IPs or environment. Fully offline with Ollama.

How it is built

Keys are stored with chmod 600 in a 700 directory; command names are stripped of control characters and capped in length before use.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

ANN search

C and x86 Assembly (SSE, AVX)5,255 lines

ANN search

Approximate nearest-neighbour search, distance kernels written in SIMD Assembly.

5,255
lines, C and x86 Assembly
SSE, AVX
kernels by hand
UniCal
team project
diagram: to draw

What it does

Approximate nearest-neighbour search with quantised vectors and pivot pruning; the distance kernels are hand-written in SIMD Assembly. Team project, UniCal.

How it is built

C and x86 Assembly (SSE, AVX); 5,255 lines.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

Industrial honeypot

B.Sc. thesis, OT securityT-Pot, Conpot

Industrial honeypot

My B.Sc. thesis: an industrial honeypot on macOS, attacked over Modbus.

T-Pot
adapted to macOS
Conpot
playing a PLC
Modbus
attacks, seen from the defence
diagram: to draw

What it does

T-Pot adapted to run on macOS, with Conpot playing an industrial PLC; then attacked over Modbus, to measure what the defender sees.

How it is built

B.Sc. thesis, OT security; T-Pot, Conpot.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

xcol

shell tool, Bash and awk389 lines

xcol

Pick a column from any command's output and act on it.

389
lines, Bash and awk
0
dependencies
fzf
picking, ranges, dry runs
diagram: to draw

What it does

Pick a column from any command's output and act on it: ls -l | xcol 9+ mv /dest/. Negative indexes, ranges, fzf picking, dry runs. No dependencies.

How it is built

Shell tool, Bash and awk; 389 lines.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

Calabrute infrastructure

network and automationprivate

Calabrute infrastructure

Infrastructure, network and automation for Calabrute.

private
locked until the launch
diagram: to draw

What it does

Infrastructure, network and automation for Calabrute. Locked until the launch.

How it is built

Network and automation; private.

My part

To write: what I did, and with whom.

Problems I met

To write: what went wrong, and how I solved it.

ADele Info

ADele

Kind:
A/D CTF framework
Size:
89 of ~200 commits mine
Where:
github.com/CCIT-2026/ADele
Modified:
Jul 2026
Owner:
mimmocrazy

Comments:

What my team ran at the CyberChallenge.IT final: traffic analysis (Caronte, Tulip, Pkappa2), an exploit farm, a TLS proxy, Suricata rules, all from one .env.

xcol Info

xcol

Kind:
shell tool, Bash and awk
Size:
389 lines
Where:
github.com/mimmocrazy/xcol
Modified:
Aug 2026
Owner:
mimmocrazy

Comments:

Pick a column from any command's output and act on it: ls -l | xcol 9+ mv /dest/. Negative indexes, ranges, fzf picking, dry runs. No dependencies.

ANN search Info

ANN search

Kind:
C and x86 Assembly (SSE, AVX)
Size:
5,255 lines
Where:
github.com/mimmocrazy/K-Nearest-Neighbors
Modified:
Nov 2025
Owner:
mimmocrazy

Comments:

Approximate nearest-neighbour search with quantised vectors and pivot pruning; the distance kernels are hand-written in SIMD Assembly. Team project, UniCal.

Industrial honeypot Info

Industrial honeypot

Kind:
B.Sc. thesis, OT security
Size:
T-Pot, Conpot
Where:
github.com/mimmocrazy/tpotce_MacOS
Modified:
Mar 2025
Owner:
mimmocrazy

Comments:

T-Pot adapted to run on macOS, with Conpot playing an industrial PLC; then attacked over Modbus, to measure what the defender sees.

Calabrute infrastructure Info

Calabrute infrastructure

Kind:
network and automation
Size:
private
Where:
not public
Modified:
Oct 2026
Owner:
mimmocrazy

Comments:

Infrastructure, network and automation for Calabrute. Locked until the launch.