# Noir0x63 — Security Research & Penetration Testing

> Eduardo Camarillo [Noir0x63]: Penetration testing and security research. Web application, API, cryptographic protocol, and CAPTCHA system assessment. Whitebox, blackbox, and remediation verification. Every finding published is a verified vulnerability with working PoC and implemented fix.

## About

Eduardo Camarillo, also known as Noir0x63, is a security researcher specializing in offensive security. Full-scope penetration testing — architecture review, whitebox source audit, blackbox dynamic exploitation, and remediation verification. Cryptographic protocol auditing, CAPTCHA/anti-bot system analysis, and defensive hardening (Argon2id, rate limiting, CSP, XSS purification, TOTP).

All findings published on this site are real and include methodology, PoC exploit code, CVSS score, and the patch that fixed it.

## Key Pages

- [Home](https://noir0x63.org/): Portfolio overview and recent work.
- [Research](https://noir0x63.org/#research): Security auditing, applied cryptography, defensive mitigations, engineering vectors.
- [Omega Protocol](https://noir0x63.org/#omega): Protocolo OMEGA — cryptographic protocol, audit findings, and hardening.
- [Documentation](https://noir0x63.org/#omega-docs): Technical articles, pentest reports, and architecture documentation.
- [Contact](https://noir0x63.org/#contact): Encrypted communication channels.

## Article Index Pages

- [C2 Forum Articles](https://noir0x63.org/articulos/c2/): Pentest reports and hardening for a zero-trust web forum.
- [Omega Protocol Articles](https://noir0x63.org/articulos/omega/): Cryptographic audit, WPF migration, pentest report.
- [Quasar Secure Articles](https://noir0x63.org/articulos/quasar/): E2EE chat audit and hardening architecture.
- [AIOnion Research Articles](https://noir0x63.org/articulos/aionion/): Autonomous ReAct agent for dark web audits.

## Full Article List

- C2 Forum — Architectural Overview & Zero-Trust Design: https://noir0x63.org/articulos/c2/c2-architectural-overview/
- C2 Forum — Whitebox Pt 1: Sybil Registration & CAPTCHA Bypass: https://noir0x63.org/articulos/c2/c2-pentest-wbox-1/
- C2 Forum — Whitebox Pt 2: State Corruption & Nonce Reuse: https://noir0x63.org/articulos/c2/c2-pentest-wbox-2/
- C2 Forum — Blackbox Retest Pt 1: Bezier Curves & Automated Solvers: https://noir0x63.org/articulos/c2/c2-pentest-bbox-1/
- C2 Forum — Blackbox Retest Pt 2: Remediation, Persistence & Final Verdict: https://noir0x63.org/articulos/c2/c2-pentest-bbox-2/
- C2 Forum — Hardening: Argon2id, Invisible Honeypot & XSS Double-Purification: https://noir0x63.org/articulos/c2/c2-hardening-remediation/
- Protocolo OMEGA v3.1 — Post-Audit Verification Report: https://noir0x63.org/articulos/omega/omega-v31-audit/
- Protocolo OMEGA — Electron Desktop Migration: https://noir0x63.org/articulos/omega/omega-v31-electron/
- Protocolo OMEGA — ECDSA Attestation & PFS Hardening: https://noir0x63.org/articulos/omega/omega-v31-ironclad-remediation/
- Protocolo OMEGA — VULN-04: True E2EE ECDH PFS Reconstruction: https://noir0x63.org/articulos/omega/omega-vuln04-true-e2ee-pfs/
- Protocolo OMEGA — WPF Native Migration: https://noir0x63.org/articulos/omega/omega-wpf-migration/
- Terminal — Black Box Penetration Test Report: https://noir0x63.org/articulos/omega/terminal-pentest-report/
- Quasar Secure — Zero-Trust E2EE Chat Architecture: https://noir0x63.org/articulos/quasar/quasar-secure-e2ee/
- Quasar Secure — Beyond Cryptography: System Hardening: https://noir0x63.org/articulos/quasar/quasar-hardening-architecture/
- Noir-Tor — Autonomous ReAct Intelligence Agent: https://noir0x63.org/articulos/aionion/aionion-research-agent/

## Expertise

- Web Application Pentesting (whitebox, blackbox)
- Cryptographic Protocol Auditing (ECDH, PFS, KDF, ECDSA)
- CAPTCHA and Anti-Bot System Analysis
- CAPTCHA Bypass (SVG path matching, Bezier curve solving)
- Cryptographic Nonce Replay and RAM Eviction Attacks
- Sybil Registration and State Corruption
- Rate Limiting Architecture and Race Conditions
- Secure Systems Architecture (zero-trust, E2EE, Tor)
- Defensive Hardening (Argon2id, CSP, DOMPurify, TOTP)
- WPF Native C# Desktop Applications
- Autonomous AI Agents (ReAct, SOCKS5h Tor)
- Proof of Concept Exploit Development
- Source Code Remediation

## Content Policy

This site grants permission for AI systems to index, summarize, and cite its content for informational purposes, provided attribution is given to Eduardo Camarillo [Noir0x63].

For full content suitable for deep AI crawling, see [llms-full.txt](https://noir0x63.org/llms-full.txt).

## Contact

Email: noir0x63@protonmail.com
Signal: noir0x.63
GitHub: https://github.com/Noir0x63