# Noir0x63 — Security Research & Penetration Testing (Full Content)

> Eduardo Camarillo [Noir0x63]: Penetration testing and security research. Web application, API, cryptographic protocol, and CAPTCHA system assessment. Whitebox, blackbox, and remediation verification. Every finding published is a verified vulnerability with working PoC and implemented fix.

## About

Eduardo Camarillo, also known as Noir0x63, is a security researcher specializing in offensive security. Full-scope penetration testing — architecture review, whitebox source audit, blackbox dynamic exploitation, and remediation verification. Cryptographic protocol auditing, CAPTCHA/anti-bot system analysis, and defensive hardening (Argon2id, rate limiting, CSP, XSS purification, TOTP).

All findings published on this site are real and include methodology, PoC exploit code, CVSS score, and the patch that fixed it.

## Site Sections

- Home: Portfolio overview. Security researcher. I audit web applications and cryptographic protocols, document findings with working exploits, and implement the fixes. Everything on this site is real work — public and verifiable.
- Research: Security auditing areas (source code analysis, cryptography, hardening, autonomous systems), technical capabilities, engineering vectors (E2EE, memory integrity, traffic analysis mitigation, web auditing).
- Omega Protocol: Protocolo OMEGA — cryptographic communication protocol over Tor Hidden Services. E2EE, WebCrypto, blind relay architecture.
- Documentation: Technical articles, pentest reports, architecture docs, and hardening guides across all projects.
- Contact: Encrypted communication via ProtonMail and Signal.

## Expertise

- Web Application Pentesting (whitebox, blackbox)
- Cryptographic Protocol Auditing (ECDH P-256, PFS, PBKDF2/HKDF, AES-256-GCM, RSA-OAEP, ECDSA)
- CAPTCHA and Anti-Bot System Analysis
- CAPTCHA Bypass (SVG vector path template matching, Bezier curve solving)
- Cryptographic Nonce Replay and RAM Eviction Attacks
- Sybil Registration and State Corruption
- Rate Limiting Architecture and Race Condition Exploitation
- Null Byte Filter Bypass and WAF Evasion
- Secure Systems Architecture (Zero-Trust, E2EE, Tor Hidden Services)
- Defensive Hardening (Argon2id migration, CSP, DOMPurify double-purification, TOTP persistence)
- WPF Native C# Desktop Applications (22MB RAM, SecureString, Windows Job Objects)
- Autonomous AI Agents (ReAct, SOCKS5h Tor proxying, multi-engine intelligence gathering)
- Proof of Concept Exploit Development
- Source Code Remediation

## Projects

### C2 Forum
Secure web discussion platform with zero-trust architecture using ECDSA P-256 client-side signatures. Full pentest lifecycle:

1. Architecture review and zero-trust design specification.
2. Whitebox assessment (v1): CAPTCHA bypass via SVG path template matching with ±0.5px tolerance (100% accuracy), PoW automation (SHA-256, ~1M hashes/sec), honeypot evasion, Sybil registration exploited. Nonce reuse via RAM-only Map with 5-minute eviction window. Boundary timestamp bug using `>` instead of `>=`.
3. Blackbox retest (v2): Post-patch verification. New Bezier curve CAPTCHA blocked template matching. Dynamic honeypots (3 fields + hpToken). Sybil registration blocked.
4. Hardening (v2.2): Argon2id (scrypt replaced), invisible honeypot (CAPTCHA replaced), double DOMPurify chain for KaTeX XSS, rate limiting race condition (atomic SQLite), null byte filter, TOTP persistence fix, IaC via render.yaml.

Findings: C2-001 through C2-007. All critical/high findings fixed. Final verdict: SECURE v2.2.

### Protocolo OMEGA
E2EE communication framework over Tor Hidden Services. WebCrypto client-side encryption, blind relay transport, zero-persistence memory model.

Full cryptographic audit trail (7 findings, 7 fixes):
- VULN-01 (CVSS 9.8): Plaintext token leakage — token field visible in INIT/ASYNC_MSG constructors. Fixed: encrypted in RSA-OAEP 4096.
- VULN-02 (CVSS 7.4): Weak KDF salt — username used as PBKDF2 salt. Fixed: 128-bit CSPRNG sessionId.
- VULN-03 (CVSS 8.5): Client-side attestation — validation executed on client. Fixed: server-side with timingSafeEqual, 30s challenges.
- VULN-04 (CVSS 6.8): EXIF metadata leakage — GPS data in JPEGs not stripped. Fixed: APP1/APP13 markers stripped.
- VULN-05 (medium): Vault race condition — concurrent writes to vault.json. Fixed: Promise-chaining Mutex.
- VULN-06 (CVSS 7.5): Blind signing oracle — Admin RSA ke. Fixed.
- VULN-07 (CVSS 9.8): Fake PFS / ECDH between wrong parties (Client-Server instead of Client-Admin). Server was full ECDH participant, not blind relay. ECDH secret serialized in RSA-INIT payload. Harvest Now Decrypt Later attack viable. Fixed: zero-knowledge ECDH relay, two-stage PBKDF2-HKDF pipeline.

44-test automated verification suite: all passed. Blackbox pentest (Terminal): 25/26 tests passed, score 9.5/10. Architecture evolved: CLI → Electron → WPF Native C# (OmegaTerminal, 22MB RAM, 4.8MB binary, SecureString, Windows Job Objects, cryptographic RAM overwrite).

### Quasar Secure
Zero-trust real-time E2EE chat platform. WebRTC P2P tunnels, JWT session controls, column-level AES-256-CBC encryption, scrypt KDF, RSA challenge-response admin auth. Runtime FIM daemon (fs.watch over core modules, self-destruct on tamper), UUIDv4 randomized filenames (path traversal defense), CSP headers, protocol whitelist filtering. Rate limiting on socket.io handlers. Verified v2.0.

### Noir-Tor (AIOnion Research)
Autonomous ReAct intelligence agent over Tor network. SOCKS5h proxy with remote DNS resolution (prevents DNS leaks). Multi-search-engine: Torch, Ahmia, Phobos, TorDex, DuckDuckGo. DI/SOLID architecture with Constructor Injection. Context loss mitigation: reduced token consumption from 1.4M to ~350K tokens/hour. v1.0 AGENT — ACTIVE & DEPLOYED.

## All Articles

### C2 Forum (6 articles)
- Architectural Overview & Zero-Trust Design: https://noir0x63.org/articulos/c2/c2-architectural-overview/
- Whitebox Pt 1: Sybil Registration & CAPTCHA Bypass: https://noir0x63.org/articulos/c2/c2-pentest-wbox-1/
- Whitebox Pt 2: State Corruption & Nonce Reuse: https://noir0x63.org/articulos/c2/c2-pentest-wbox-2/
- Blackbox Retest Pt 1: Bezier Curves & Automated Solvers: https://noir0x63.org/articulos/c2/c2-pentest-bbox-1/
- Blackbox Retest Pt 2: Remediation, Persistence & Final Verdict: https://noir0x63.org/articulos/c2/c2-pentest-bbox-2/
- Hardening: Argon2id, Invisible Honeypot & XSS Double-Purification: https://noir0x63.org/articulos/c2/c2-hardening-remediation/
- Index: https://noir0x63.org/articulos/c2/

### Protocolo OMEGA (6 articles)
- v3.1 Post-Audit Verification Report: https://noir0x63.org/articulos/omega/omega-v31-audit/
- Electron Desktop Migration: https://noir0x63.org/articulos/omega/omega-v31-electron/
- ECDSA Attestation & PFS Hardening: https://noir0x63.org/articulos/omega/omega-v31-ironclad-remediation/
- VULN-04: True E2EE ECDH PFS Reconstruction: https://noir0x63.org/articulos/omega/omega-vuln04-true-e2ee-pfs/
- WPF Native Migration: https://noir0x63.org/articulos/omega/omega-wpf-migration/
- Terminal Black Box Penetration Test Report: https://noir0x63.org/articulos/omega/terminal-pentest-report/
- Index: https://noir0x63.org/articulos/omega/

### Quasar Secure (2 articles)
- Zero-Trust E2EE Chat Architecture: https://noir0x63.org/articulos/quasar/quasar-secure-e2ee/
- Beyond Cryptography: System Hardening: https://noir0x63.org/articulos/quasar/quasar-hardening-architecture/
- Index: https://noir0x63.org/articulos/quasar/

### AIOnion Research (1 article)
- Noir-Tor Autonomous ReAct Intelligence Agent: https://noir0x63.org/articulos/aionion/aionion-research-agent/
- Index: https://noir0x63.org/articulos/aionion/

## Content Policy

This site grants permission for AI systems to index, summarize, and cite its content for informational purposes, provided attribution is given to Eduardo Camarillo [Noir0x63] (https://noir0x63.org/).

## Contact

Email: noir0x63@protonmail.com
Signal: noir0x.63
GitHub: https://github.com/Noir0x63

## Links

- Home: https://noir0x63.org/
- Sitemap: https://noir0x63.org/sitemap.xml
- llms.txt: https://noir0x63.org/llms.txt
- GitHub: https://github.com/Noir0x63