Subject

Bugsy Hewitt

Digital Necromancer

Offensive security researcher and bug bounty hunter, building autonomous hunting tools.

Every system has its dead

Not gone, but forgotten

Lost services and secrets

Buried in shallow graves

I make them speak

BinAbsInspector → autopsy✦SCMKit → covenant✦ smuggler.py → doppelganger✦firmeye → embalmer✦ GraphQLmap → enshroud✦Panoptic → exhumed✦ OFX → ferryman✦subjack → graverobber✦ IoTSeeker → hellhound✦H26Forge → mangle✦ MAIAN → omen✦mythril → oracle✦ xunfeng → ossuary✦LLMFuzzer → ouija✦ hodor → possession✦race-the-web → reaper✦ shhgit → seance✦credential-digger → tombstone✦ cloudflare-enum → unearth✦SSRFmap → wraith✦ BinAbsInspector → autopsy✦SCMKit → covenant✦ smuggler.py → doppelganger✦firmeye → embalmer✦ GraphQLmap → enshroud✦Panoptic → exhumed✦ OFX → ferryman✦subjack → graverobber✦ IoTSeeker → hellhound✦H26Forge → mangle✦ MAIAN → omen✦mythril → oracle✦ xunfeng → ossuary✦LLMFuzzer → ouija✦ hodor → possession✦race-the-web → reaper✦ shhgit → seance✦credential-digger → tombstone✦ cloudflare-enum → unearth✦SSRFmap → wraith✦

01 — currently raising

Grimoire

Animating what was meant to stay still.

AlienClaw

Agent infrastructure where tool-composition genomes compete and evolve, and the winning strategies climb a shared leaderboard.

AgentsEvolutionraised 2026-10-04 Inspect

Chimera

Adaptive honeypot intelligence. SPRT sequential detection and POMDP decision engines learn an intruder’s intent, then bait them deeper.

DeceptionHoneypotsraised 2026-06-14 Inspect

v3x.tech

The offensive-security platform. Home to Pho3nix, an autonomous bug-bounty platform whose AI hunters run recon, triage and validation in parallel, and L3viathan, an operator workstation that puts a whole engagement on one command deck.

PlatformBug bounty Inspect

02 — necromancer suite

Necromancer Suite

Twenty abandoned open-source tools, dug up and rebuilt for current targets. Each card names the one it raises.

Autopsy, resurrects BinAbsInspector: Whole-program binary CWE analysis with angr-backed taint tracking.

Covenant, resurrects SCMKit: SCM recon and token validation across GitHub, GitLab, Bitbucket.

Doppelganger, resurrects smuggler.py: Headless HTTP desync scanner for modern request smuggling.

Embalmer, resurrects firmeye: Firmware pipeline: extract, scan for credentials, hand off for analysis.

Enshroud, resurrects GraphQLmap: GraphQL attack-surface scanner: introspection, depth DoS, alias batching.

Exhumed, resurrects Panoptic: Local File Inclusion exploitation against a live file-path database.

Ferryman, resurrects OFX: OFX financial-file scanner for fintech parser confusion and PII.

Graverobber, resurrects subjack: Subdomain-takeover hunter for dangling CNAME, NS, and SPF records.

Hellhound, resurrects IoTSeeker: IoT default-credential scanner for cameras, routers, and forgotten devices.

Mangle, resurrects H26Forge: H.265 codec fuzzer mutating HEVC bitstreams against decoders.

Omen, resurrects MAIAN: Trace-vulnerability scanner for greedy, suicidal, and reentrant contracts.

Oracle, resurrects mythril: Symbolic-execution analyzer for EVM bytecode vulnerabilities.

Ossuary, resurrects xunfeng: SQLite-backed network asset inventory for solo bug hunters.

Ouija, resurrects LLMFuzzer: LLM endpoint fuzzer for the OWASP LLM Top 10.

Possession, resurrects hodor: Replays your request as other users to break broken authorization.

Reaper, resurrects race-the-web: Single-packet race-condition engine for the bugs scanners can't see.

Seance, resurrects shhgit: Watches the public commit stream for leaked keys and secrets.

Tombstone, resurrects credential-digger: Credential extraction with hard scope enforcement and HackerOne reports.

Unearth, resurrects cloudflare-enum: Finds the true origin IP hidden behind any CDN.

Wraith, resurrects SSRFmap: SSRF fuzzer that steals cloud metadata and pivots inward.

03 — disciplines

Specialities

Hunting comes first. The tooling and the studio follow. Scroll —

Discipline / I

Offensive Security

Web and web3 targets taken apart by hand, for the bugs scanners walk past. Hunting on HackerOne and Immunefi.

Web application penetration testing
IDOR & broken access control
SSRF, blind SSRF & request smuggling
Stored & DOM-based XSS
Business logic flaws
Web3 & smart-contract attack surface
API security testing
Recon, OSINT & responsible disclosure

Discipline / II

AI & Automation

Most hunters work with one set of hands. These agents run recon, tooling and triage in parallel, and hand back what deserves a human look.

Autonomous agent orchestration
Multi-agent pipelines
LLM tooling & MCP server design
Security automation pipelines
AI-assisted recon & triage
Custom offensive tooling
Prompt & workflow engineering
Rapid prototyping

Discipline / III

Audio / Video / Media

A working studio. Songs written, recorded, mixed and mastered here, with the video and artwork around them.

Music production
Mixing & mastering engineering
Songwriting & composition
Audio engineering
Sound design & post
Reaper (recording, production)
Premiere Pro (video editing)
Photoshop (design)

04 — the rig

The Loadout

The offensive stack that finds the bugs, and the B-side that scores everything else. Mostly hand-built.

Offensive

Burp Suite Professional
Caido
Custom Grimoire suite
AI-assisted recon & triage
Manual-first methodology

Engineering & AI

Python
Claude Code
Custom MCP servers
Multi-agent orchestration
Git

Environment

BlackArch / Kali Linux
Neovim
tmux
Docker
Self-hosted infrastructure

B-side

Reaper
FabFilter · Waves · Soundtoys
Toontrack · STL Tones
Audient · Shure · Audio-Technica · Electro-Voice
Kali Audio monitors
Gibson · Fender · Ibanez

05 — the séance

The Séance

Found something I should see? A target, a collaboration, a contract. The veil is thin. Reach through.

necromancer@v3x — séance

necromancer@v3x ~ % ./summon --channels

[ séance initiated ]

github ............ /bugsyhewitt email ............. bugsyhewitt@gmail.cominstagram ......... @bugsyhewitt

[ four channels open ]