Hi, I'm moeve.

CTF player by night. By day I'm a security & infrastructure engineer in Germany.

Outside work and CTFs I fall into rabbit holes building things with AI. Recent ones: copyfail-rs, kernel privesc PoC + the only public detection tool (CVE-2026-31431). forgeterm, runtime security monitor for AI coding agents. oxide, cross-platform C2 framework, every TTP with detection rules. Most die in /tmp. The ones that survive get a README.

Most of what I post here lives in the gap between “this exploit is well-known” and “nobody documented this specific chain.”

EOF: black tea, split keyboards, long walks, too many dotfiles.