Reverse engineer & software developer. I take things apart to find out how they actually work, then build the tool that should have existed in the first place.
Most of my work lives at that intersection: Android internals, network protocols, undocumented web APIs, and the desktop/server software that wraps them into something usable.
disassemble → understand → rebuild → ship
Reverse engineering & security Android app internals (jadx, Frida, SSL unpinning, app virtualization), traffic interception and protocol recovery, undocumented web/private API reconstruction, LAN device fingerprinting, and web application security testing.
Systems & tooling Native Linux desktop apps (GTK4/libadwaita), MCP servers, device automation over ADB/scrcpy, local-first image and media pipelines, agent skills and developer tooling.
Product engineering Full-stack web (Next.js, TypeScript, Frappe/ERPNext, Python), Android (Java/Kotlin), and the unglamorous integration work — biometric terminals, RTSP/CCTV stacks, payments, attendance sync — that makes systems talk to each other.
| Project | What it is |
|---|---|
| droid-deck | Native GTK4/libadwaita manager for multiple ADB devices — mirror, record, and share screens via scrcpy. Follows your GNOME theme and accent color. |
| pinterest-mcp | MCP server built by reversing Pinterest's own /resource/ web API. Search, pins, boards, and media — fully unauthenticated, no token or key. |
| logoswap | LogoSwap Studio — rebrand product photography locally. Erases a printed logo, composites a new one into the surface, and finishes the frame as studio product shots. Hardened on a real 97-image catalogue rebrand. |
| skills | Agent Skills installable into Claude Code and 16 other agents via skills.sh. |
| forex-fundamental-analysis | Fundamental analysis taught through interactive, gamified lessons. |
| md-reader | A markdown reader that gets out of the way. |
| sudoku | Sudoku, for fun. |
Some of the more interesting work — Android container/virtualization research, ZKTeco biometric discovery over raw UDP broadcast, no-root traffic blocking via a local blackhole VPN — lives in private repos. Ask me about it.
Languages Python · TypeScript / JavaScript · Java · Kotlin · Bash · SQL
Reverse engineering jadx · Frida · Burp Suite · HTTP Toolkit · adb · Wireshark · nuclei
Build Next.js · React · Node · Frappe / ERPNext · GTK4 / libadwaita · Android SDK · Docker
Run on Linux (Ubuntu / GNOME, Wayland), self-hosted VPS, Vercel
- Digging deeper into Android runtime internals and app virtualization
- Working bug bounty targets on Bugcrowd — web app surface, methodically
- Building agent tooling and MCP servers for the things I do repeatedly
Email — [email protected] · GitHub — @Martin-Code202
Open to collaborating on reverse engineering, security tooling, and anything that needs a protocol figured out.