Red Teamer • FOSS Developer • Privacy Advocate • Systems Thinker
Welcome to my GitHub profile — a workspace where cybersecurity, systems programming, and open-source philosophy intersect. I'm an 18-year-old developer and aspiring red teamer from Hamilton, Ontario, building tools that put control back in users' hands.
I'm a self-taught cybersecurity specialist and software developer with a deep focus on red teaming, privacy infrastructure, and systems-level programming. I live with High-Functioning Autism, ADHD, OCD, and Complex Tourette's Syndrome — and I've learned to treat my brain like a custom-built system: one I've reverse-engineered, optimized, and now use to build things that matter.
I founded RedHead Industries , a FOSS-oriented organization dedicated to software freedom, privacy defense, and open research.
| Project | Description | Status |
|---|---|---|
| APM (Android Package Manager) | 10,000+ line C++17 package manager for rooted Android — APT-style workflow, deb support, dependency resolution, GPG verification, and Magisk-inspired module system | Open Beta (2.0.0b) |
| Fisca | Offline-first Android app for ODSP/DSO recipients in Ontario — transaction tracking, HST auto-calc, CSV import/export, zero internet permissions | Active |
| GNUXON | GPLv3 bodycam app for Android — hardware control, offline-only, reproducible builds for F-Droid | v2.0b "Bobcat" |
| LenovoKeyboardFixer | Production-ready Linux utility fixing PS/2 keyboard wake issues on Lenovo laptops | Stable |
| SimpleBoot | Root Android app that turns phones into USB boot devices via ConfigFS — live OS deployment without extra hardware | Active |
| UEFIParted | Minimalist Debian-based live ISO for UEFI firmware tasks, Secure Boot compatible | Inactive/Discontinued |
Cybersecurity
- Red Teaming & Penetration Testing
- Threat Modeling & C2 Tunneling
- Social Engineering Awareness & OPSEC
- Privilege Escalation Techniques
- Responsible Disclosure
Languages
- C++17 • Kotlin • Bash • Python (Beginner) • systemd scripting
Operating Systems
- Linux: QubesOS, EndeavourOS (Arch), Debian, Ubuntu, Fedora
- Android: AOSP development, GrapheneOS, iodeOS, LineageOS
- Firmware: UEFI, Secure Boot, BIOS metadata purging
Android Development
- NDK • Root-level system programming • Magisk modules • AOSP integration (Soong/Ninja)
Networking & Privacy
- SOCKS5 infrastructure (Dante) • OpenVPN • obfs4 Tor bridges • VPN chaining • DNS leak prevention
- Personal Privacy Infrastructure: Transformed EndeavourOS into a SOCKS5 proxy with MullvadVPN integration and obfs4 Tor bridging
- TryHackMe & HTB: Multiple hours in enumeration, lateral movement, privilege escalation — Red Team Path (in progress)
- Vulnerability Disclosure: Identified exposed
logging-key.jsonin an undisclosed Android app (April 2025) — responsibly disclosed
- Advancing APM toward production release with full AOSP integration
- Building out RedHead Industries' open-research branch (experimental neuromedicine and artificial intelligence)
- Completing Red Team Path and pursuing eJPT certification
- Contributing to privacy-focused Android tooling
- Privacy isn't hiding — it's making tracking expensive and annoying.
- Software should be free (as in freedom), transparent, and accountable.
- Build tools that help people, especially the vulnerable.
- Never stop reverse-engineering — yourself included.
- Email: matthewdaluz@tutamail.com
- GitHub: github.com/matthewdaluz
- Organization: RedHead Industries
- Web (RedHead Industries): redheadindustries.xyz
- Web (Personal): matthewdaluz.me
"The quieter you become, the more you can hear." — Ram Dass
Also: "i use debian btw" — Matthew DaLuz
🧡 Custom-built, self-documenting, and still evolving.