Skip to content
View jayluxferro's full-sized avatar

Highlights

  • Pro

Block or report jayluxferro

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
jayluxferro/README.md

Jay Lux Ferro

Cybersecurity researcher & reverse engineer — Lecturer in Telecommunication Engineering (BSc, MPhil, PhD), lead of SPERIXLABS, a cybersecurity research lab.

Blog X Email


About

I work on two things at once: peer-reviewed research on the security of emerging systems, and hands-on security practice — auditing real-world mobile apps, routers, and LLM agent tooling, then publishing what I learn on the SPERIXLABS blog.

  • Research — 48 publications across IoT & network security, blockchain & 5G, AI & assistive technologies, quantum computing & QPU security, urban systems & public safety, and applied security audits of banking, streaming, and messaging platforms. Read them →
  • Certifications — ICSI CNSS Certified Network Security Specialist · EC-Council Certified Cybersecurity Technician · Certified SOC Analyst
  • Teaching — Telecommunication Engineering, KNUST — from IoT security to advanced cryptography, including quantum computing & information processing

What I'm building

AI × Security & LLM Systems

Benchmarking how well LLMs actually reason about security, and building the tooling that makes agents cheaper, safer, and more reliable.

  • Measuring the ceiling — Evidence that easy-to-medium cybersecurity MCQ benchmarks have saturated for current-generation LLMs, Array (2026) — shows where current benchmarks stop discriminating between models. DOI
  • laya-mlx-benchmarks — independent local benchmark of typed-decision models on Apple Silicon, with the full suite and recorded results
  • entropy-gate — token compression by progressively freezing out low-information tokens before they reach the model
  • manifold — chain multiple LLM proxy services into a single transparent pipeline · writeup
  • llm-redactor — removes, masks, or transforms sensitive content before it leaves your device · writeup
  • local-splitter — local model as a triage layer in front of frontier cloud LLMs, cutting token costs · writeup
  • resilient-write / resilient-read — MCP servers giving coding agents a fault-tolerant write surface and safe chunked reads of huge files
  • hivemind — OS-inspired scheduler for concurrent LLM coding agents
  • gen-pilot — context-aware generation planning and deferred document rendering for coding agents
  • agentic-security — deterministic policy guards for autonomous security agents: a multi-model live evaluation over 8 frontier LLMs, 40 security scenarios and 4,066 proposed actions
  • daedalus — container detonation, analysis & experimentation sandboxing · writeup
  • burp-ollama — AI-powered security testing in Burp Suite with local Ollama models
  • ida-pro-mcp — bridges IDA Pro with language models over MCP
  • ollama-forge — pull models from Hugging Face, convert them, add adapters, run them in Ollama

Quantum Computing & QPU Security

Side-channel leakage on real quantum hardware, and the course material behind how the machines actually work.

  • CrossEcho — Predictive Modelling of Crosstalk Side-Channel Leakage on Multitenant Superconducting QPUs, Quantum Engineering (2026) — models how crosstalk turns shared QPU hardware into a side channel between tenants. DOI · code
  • QCIP — Quantum Computing & Information Processing: a Qiskit-based course covering qubits, entanglement, teleportation, BB84, Deutsch–Jozsa, Grover, Shor, and quantum error correction

Reverse Engineering & Mobile Security

  • reFlutter — Flutter reverse engineering framework
  • hermes-dec — decompiler and disassembler for React Native Hermes bytecode
  • MEDUZA — universal SSL unpinning tool for iOS
  • ssl-kill-switch2 — disables certificate validation, including pinning, on iOS and macOS
  • Clutch — fast iOS executable dumper
  • APKProxyHelper — patches APKs for proxy use

Research Artifacts

Code accompanying peer-reviewed work and courses.

Utilities

Everything else — browse all repositories.


GitHub followers GitHub stars

BUILD WITH SECURITY

Pinned Loading

  1. IoT-IDS IoT-IDS Public archive

    Intrusion Detection System for IoT Devices

    C 22 5

  2. XDM-Safari-Extension XDM-Safari-Extension Public

    XDM Extension for Safari

    JavaScript 17 4

  3. GhanaPostGPS-REST-API GhanaPostGPS-REST-API Public

    REST API for GhanaPostGPS

    CSS 87 41

  4. USBCDCEthernet USBCDCEthernet Public

    Driver USB-Ethernet Davicom DM9601

    C++ 4 3

  5. frida-ios-dump frida-ios-dump Public

    Forked from AloneMonkey/frida-ios-dump

    pull decrypted ipa from jailbreak device

    JavaScript 2

  6. Impact-I/reFlutter Impact-I/reFlutter Public

    Flutter Reverse Engineering Framework

    Python 2.8k 294