Skip to content
View 404saint's full-sized avatar

Block or report 404saint

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
404saint/README.md
RUGERO Tesla | Security Researcher Research philosophy animation
Website   Contact



ICS/OT SECURITY   |   TECHNICAL INVESTIGATION   |   RESEARCH & DEVELOPMENT


This is an evolving hub for my security research, technical experiments, tools, and projects.

I investigate how systems work, how they communicate, where security assumptions fail, and how technical findings can inform better defenses. My work combines hands-on experimentation, protocol and system analysis, custom tooling, and reproducible documentation.


01  •  RESEARCH & INVESTIGATIONS

Understanding systems through hands-on investigation.

PLC Security Research →   /   IN DEVELOPMENT

An upcoming research initiative exploring PLC security through controlled experiments, technical investigation, and reproducible lab work. Details and findings will be added as the work develops.

Industrial Protocols Research →

A collection of investigations into industrial communication, protocol behavior, implementation details, and security considerations. The series explores protocols from the raw socket level upward through dissection, capability analysis, controlled manipulation, resilience testing, and defensive analysis.


02  •  TOOLS & EXPERIMENTS

Tools built to investigate, analyze, and understand technical systems.

Guardian-OT →

A forensic and integrity tool for ICS/OT removable media, combining device identification, file integrity verification, and entropy-based anomaly detection.

MEA · Modbus Exposure Analyzer →

A passive traffic analysis tool for profiling Modbus communication, examining device behavior, and identifying potentially exposed or misconfigured industrial assets.

New tools and experiments will be featured here as the portfolio grows.


03  •  LABS & TEST ENVIRONMENTS

Controlled environments for reproducible investigation.

GNS3 ICS/OT Security Lab →

An isolated industrial network simulation built around OpenPLC and FUXA HMI for exploring industrial architectures and security scenarios.

ICS/OT Home Lab →

A multi-tier industrial simulation connecting OpenPLC, FUXA, and Ignition Maker for investigating industrial communication and system behavior.

These environments support controlled experimentation, evidence collection, and repeatable testing.


04  •  TECHNICAL ENVIRONMENT

My research environment evolves with the problems I investigate. Current work draws on:

Python   C/C++   Bash   Linux   Docker   Git   Wireshark   tcpdump

Industrial systems, network analysis, protocol implementations, virtualized environments, and custom research tooling.

This is a snapshot of the current environment, not an exhaustive list of my technical interests.


05 •  WRITING & FINDINGS

Research is documented through technical articles, repository notes, lab procedures, and experimental findings. I aim to make investigations understandable, reproducible, and useful to others working on related problems.

Explore research and publications



GitHub   ·   Website   ·   Email



404SAINT™   RESEARCH · EXPERIMENTATION · DISCOVERY

Understand the system. Inspect the evidence. Follow the questions.

Pinned Loading

  1. 404saint 404saint Public

  2. guardian-ot guardian-ot Public

    Hardware-aware forensic engine for ICS/OT removable media integrity, entropy-based anomaly detection, and industrial protocol hunting.

    Python 1

  3. mea mea Public

    Modbus Exposure Analyzer (MEA) — behavioral and risk analysis tool for exposed Modbus devices.

    Python 2 1

  4. surfacelens_v2 surfacelens_v2 Public archive

    Tactical Attack Surface Management (ASM) & Shadow IT Intelligence Framework.

    Python 1

  5. surfacelens surfacelens Public archive

    Passive Attack Surface & Shadow IT Intelligence Engine (Online + Offline)

    Python 3

  6. contextlens contextlens Public archive

    Decision-support tool for analyzing domain/IP infrastructure profiles and prioritizing assessment efforts.

    Python 2