Skip to content
View capitan0n's full-sized avatar
🏈
🏈
6 followers · 4 following

Achievements

Achievement: StarstruckAchievement: Pull Shark

Achievements

Achievement: StarstruckAchievement: Pull Shark

Block or report capitan0n

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
capitan0n/README.md

Alexandros - capitan0n

Electrical & Computer Engineering student at the University of Peloponnese, specializing in Computer Science. I build defensive security and privacy tools for Linux and Android, with a focus on system hardening, blue team work and digital forensics.

Droynis

Droynis: read-only security and privacy audit for Android

A read-only security and privacy audit for Android, inspired by Lynis. Droynis checks the phone it runs on, explains every finding with the raw evidence, and opens the Settings screen that fixes it. It never changes anything itself.

  • 90 hardening checks: device integrity, access control, apps and permissions, suspicious apps, network and radios. Full catalog.
  • Four privilege tiers: Base (public APIs), ADB, Shizuku and opt-in Root. Privileged tiers run only a fixed list of read-only commands.
  • Offline by design: no INTERNET permission, no Google Play Services, no analytics.
  • Honest results: a check passes only on a value it actually read. When Android won't say, it's Unknown, never Passed.
  • Verifiable supply chain: reproducible builds, signed releases with SHA-256 checksums and GitHub build attestations.
  • Scheduled scans that report what got worse or got fixed, and diff-able Markdown/JSON reports with personal details redacted.

Kotlin · Android · Design notes

Get it on F-Droid

Other projects

  • dnser - Zero-dependency Python CLI, published on PyPI, that switches Linux DNS through NetworkManager or systemd-resolved, with DNS-over-TLS, leak-safe fallback, benchmarking and one-command rollback. Security-hardened root operations and automated CI/CD releases with OIDC trusted publishing.

  • sshd-lint - Static analyzer for sshd_config. Encodes OpenSSH hardening best practices into repeatable, automated checks so misconfigurations get caught before they ship. Published on PyPI.

  • probolos (beta) - Deny-by-default USB gate for Linux: new devices stay blocked until you approve them, after identity, behaviour and storage checks. Defends against BadUSB and rogue keyboards. Published on PyPI.

  • Digital forensics tooling (private, in progress) - to be published.

Stack

Kotlin · Android · Python · Bash · Linux

Interests

Homelab & self-hosting · network security · privacy/anonymity tooling · FOSS ecosystems

Contact

Open to internships and entry-level roles in security engineering, SOC analysis, incident response/DFIR, DevSecOps and Linux systems administration.

Pinned Loading

  1. droynis droynis Public

    Offline Android security audit tool. 90 read-only checks across multiple privilege levels (base, ADB, Shizuku, root), 0–100 score and saved reports. Privacy-oriented, no internet permission, zero t…

    Kotlin 36 2

  2. sshd-lint sshd-lint Public

    Zero-dependency, offline static analyzer for OpenSSH sshd_config. Flags weak crypto, auth, and access-control settings for SSH hardening, referencing CIS, Mozilla, and NIST guidance, with CI-friend…

    Python 7 1

  3. dnser dnser Public

    Linux DNS switcher for NetworkManager & systemd-resolved | DoT, leak-safe fallback, latency benchmarking, one-command undo.

    Python 2

  4. probolos probolos Public

    Deny-by-default USB gate for Linux. Unknown devices stay unauthorized until you approve them, after identity, consistency, behaviour and storage checks. Defends against BadUSB, rogue keyboards and …

    Python 1