Independent low-level security researcher and hardware hacker, operating from Indonesia. Specialized in Linux kernel exploitation, rootkit development, and CVE discovery. A former 1990s 16-bit assembly virus writer turned modern kernel-internals researcher. Operating publicly as bluedragonsec.com.
Low-level security is not a single discipline. It is the intersection of kernel internals, hardware reality, and code that runs without abstractions. I have practiced all three since 1998.
Linux kernel internals — SLUB allocator, the new sheaves caching architecture in 7.0, race conditions, UAF and double-free chains. Modern mitigation bypass: KASLR, SMEP, SMAP, hardened slab. Static audit paired with targeted fuzzing.
Heap and stack corruption on hardened userland. Daemon and parser bug-class research at the low level. ROP / JOP chain construction, one-gadget exploitation, modern mitigation bypass on DNS servers, FTP daemons, and parsers.
Hardware hacking and tactical robotics. Embedded systems, sensor and biometric evasion, custom offensive hardware. Electronics work since 1996 — treated as a first-class discipline, not an afterthought to the software work.
Six pinned projects out of 42 public repositories. From legendary archive code to active 2026 research — everything below is open source and reachable on GitHub.
Ftrace-based Linux Loadable Kernel Module rootkit for kernel 5.x up to 6.2 on x86_64. Hides files, processes, bind & reverse shell ports. Privilege escalation. Modern Linux kernel target.
FreeBSD KLD rootkit for FreeBSD 13. Hides files, processes, ports; ships with a bind-shell backdoor. Developed manually by Antonius in 2023.
Proof-of-concept for CVE-2026-23416 — vulnerability discovered by Antonius. Affects Linux kernel 6.17 through 7.0-rc5. mm/mseal stale pointer after VMA merge.
Technical research on a theoretical weaponization path for Linux kernel 7.0-rc7 memory corruption primitives via slab_sheaf union state confusion in the SLUB Sheaves architecture.
Xingyiquan — a legendary Linux kernel rootkit for kernel 2.6 and 3.x. Developed by Antonius (sw0rdm4n / w1sdom) in 2014. Featured in academic literature and rootkit indices.
Legacy exploit collection — historical proofs-of-concept from the early career as ev1lut10n / sw0rdm4n. Includes the polkitd race-condition LPE released in 2011.
Public CVEs and responsibly-disclosed vulnerabilities, recent and archival. Full archive lives on bluedragonsec.com.
From 16-bit assembly viruses in 1998 to kernel 7.0 exploitation in 2026. A continuous, uninterrupted track in offensive R&D.
Where to find the operator. All channels are monitored. bluedragonsec.com is the canonical home address.
Available for vulnerability research collaboration, contract engagement, and international recruitment as a low-level specialist. Channels above are open.