André Henrique


> 🇧🇷 [Versão em Português](README-pt-BR.md)

---

🧠 About Me

I'm André Henrique, Co-Founder of União Geek and Cybersecurity Advisor @ VisionCybersecurity — with 20+ years protecting critical infrastructure, specializing in Offensive & Defensive Security across IT, OT, ICS, SCADA, IoT and IIoT environments.

• 🎓 Academic Professor — OT/ICS/SCADA Security
• 🏴 8th place — BlackHat CTF 2018
• 🔐 OSCP · GICSP · GRID · CEH · 45+ certifications
• 📦 500+ projects delivered · 5,300+ students trained
• 🧩 Speaker at MindTheSec, BSides, H2HC, RoadSec, FLISOL

---

🏅 Certifications

!OSCP
!GICSP
!GRID
!CEH
!CompTIA
!LPIC
!ISA62443
!Nozomi
!RSA
!Microsoft

+ EHF · OEIS · Securonix SOC Analyst · Sophos EDR Admin · Tenable (Nessus/SC/IO) · ICS Security w/ GRFICS and 30+ more

---

🔬 Areas of Expertise

| Domain | Focus |
|:-------|:------|
| 🔴 Offensive Security | Web, Mobile, Network, WiFi, Social Engineering & Code Review Pentesting |
| 🔵 Defensive Security | SIEM, SOAR, XDR, MDR, SOC, IR — NIST-CSF & MITRE ATT&CK |
| 🏭 OT / ICS / SCADA | Industrial security assessment, protocol analysis (Modbus, DNP3, OPC) |
| 📡 IoT & IIoT | Embedded device security, firmware analysis, wireless protocols |
| ☁️ DevSecOps | Secure SDLC, CI/CD pipeline security, vulnerability management |
| 🎓 Teaching & Speaking | Academic professor, Udemy courses, corporate workshops, conferences |
| ⚖️ Governance | LGPD, ISO 27001, ISA/IEC 62443, risk analysis & compliance |
| 🌐 Network Security | RouterOS/Mikrotik, protocol exploitation, brute-force automation |

---

🚀 Featured Projects

> XPL-Forge Suite — modular offensive security frameworks for embedded, printer, wireless and (soon) perimeter ecosystems.

🛰️ EmbedXPL-Forge

Embedded Device Security Assessment Framework

• 700+ modules · 350 CVEs · 55 vendors
• Routers, IP cameras, GPON ONTs, ISP CPEs, IoT edge
• APT Group Engine (APT28, dns-hijack chains, MikroTik, TP-Link)
• pip install embedxpl

 

🖨️ PrinterXPL-Forge

Complete printer penetration testing toolkit (successor of *PrinterReaper*)

• 109 commands across PJL, PostScript & PCL
• 4 network protocols, SNMP automated discovery
• File exfiltration, NVRAM access & attack payloads
• Modern Python 3.8+ offensive security tool

 

📡 WirelessXPL-Forge

Wireless attack surface & lab orchestration

• Wi-Fi, BLE, AWDL, rogue AP, mesh, Bruce wardriving
• PCAP analysis, scapy pipelines, red-team workflows
• pip install wirelessxpl · BSD-3-Clause

 

🗡️ MikrotikAPI-BF

RouterOS Attack & Exploitation Framework — v3.5.4

• 40 CVE/EDB exploits, Chimay-Red, Winbox
• MAC-Server L2, credential decoder, NPK analyzer
• 300-thread brute force, Nmap NSE auto-install
• CVE scanner · pip package

 

⚙️ Modbus-Process-Simulator

Java MODBUS Protocol Slave Simulator for OT/ICS testing

• Industrial control system security validation
• Evolution of ModbusPal Enhanced
• ICS/SCADA security research lab

 

🔤 WordListsForHacking

Wordlist generation toolkit for pentest & red team — 25 subcommands

• charset, profile, corp-users, default-creds, password-DNA
• DNS fuzzing, web scraping, ISP keygen, ICS/SCADA creds
• ML training, pipal analysis · pip install wfh-wordlist

 

🛠️ Coming soon: FirewallXPL-Forge (FW/NGFW/UTM/WAF/VPN/NAC/LB and OT/ICS firewalls — 164 modules, 18 vendors) is currently in private development.

---

⚡ Tech Stack

🐍 Languages

!Python !Java !Bash !PowerShell !C !PHP

🐧 Systems & OS

!Linux !Kali Linux !Debian !Ubuntu !Windows Server

🔒 Security Tools

!Metasploit !Burp Suite !Nmap !Wireshark !Nozomi !Tenable

---

📊 GitHub Analytics Dashboard

🏆 Profile Stats

⚡ Contribution Graph

🌊 Activity Heatmap

---

🌐 União Geek

Cybersecurity Consulting & Training from Brazil.


---

<!-- LEGAL-NOTICE-UG-MRH -->

Legal notice / aviso legal

Profile README and related files in this repository are licensed under MIT (see [LICENSE](LICENSE)). No warranty; no liability for misuse or third-party claims — use at your own risk. Preserve attribution to the author when reusing; issues and contributions via pull request are welcome where applicable.

O README de perfil e ficheiros associados usam MIT (ver [LICENSE](LICENSE)). Sem garantias; sem responsabilidade por uso indevido — uso por sua conta e risco. Mantenha atribuição ao autor.

---

☕ Support / PIX

If my projects helped you, feel free to contribute! PIX is a Brazilian instant payment method.

| | |
|:---:|:---|
| 🇧🇷 PIX | [email protected] |
| ⭐ GitHub | Give a star to any project that helped you |

---

*For authorized security testing and educational purposes only.*

© 2026 André Henrique (mrhenrike) • União Geek

Collapse