Spoor: GitHub Footprint
Rust CLI inspecting public GitHub metadata: commit identities, SSH keys, and structured reports.
Voldigoade
Loading Workspace
Systems & Rust
Security & Privacy
Open Source
workspace://voldigoade
HELLO, I AMVoldigoade.
Rust, CLI, OSINT, privacy, systems. I build tools, test ideas and document what actually works.
Technical Overview
Crucksware: Rootfs Diff
Rust prototype for diffing extracted Linux firmware rootfs trees with deterministic text and JSON output.
Secure Messaging Research
Source-linked comparison of Signal, SimpleX, Session, Olvid, Threema and Briar across threat models and metadata exposure.
Local-First & Transparency
Focus on local execution, zero cookies on this site, no tracking telemetry, and open-source licensed tools.
Technical Focus
Rust & CLI
Building fast CLI tools in Rust with strict typing and clean error handling.
OSINT & Footprint
Analyzing what public APIs and metadata actually expose in practice.
Firmware & Rootfs
Comparing extracted firmware rootfs trees, spotting diffs and extracting artifacts.
Local-First & Privacy
Focusing on local execution, without telemetry or unnecessary cloud dependencies.
Workflow
Step 1
Scope
Start from a concrete need: a parser, a rootfs diff, or a repo audit. No over-engineering.
Step 2
Inspect
Read RFCs, upstream source code and network traces. Test assumptions with reproducible tests.
Step 3
Build
Write clean, strongly typed Rust. Handle errors explicitly and keep dependencies minimal.
Step 4
Document
Publish to GitHub, state what works, what fails, and documented limits.
Rust & CLI
Building fast CLI tools in Rust with strict typing and clean error handling.
OSINT & Footprint
Analyzing what public APIs and metadata actually expose in practice.
Firmware & Rootfs
Comparing extracted firmware rootfs trees, spotting diffs and extracting artifacts.
Local-First & Privacy
Focusing on local execution, without telemetry or unnecessary cloud dependencies.
Projects & Research
All projectsSpoor
Rust CLI to inspect what a GitHub account or repo exposes publicly: commits, keys, and metadata.
- Rust CLI implementation and HTTP query service
- Real-time progress reporting and local SQLite cache
- Structured JSON exports and audit summaries
Crucksware
Rust prototype to compare two extracted firmware rootfs directories and output text or JSON reports.
- Semantic diff of Linux rootfs folders
- Deterministic text and JSON reports
- Experimental project under active dev
Messaging Research
Source-based comparison of secure messaging apps: Signal, SimpleX, Session, Olvid, Threema, Briar.
- Evaluated against threat models
- Network metadata exposure analysis
- Primary references and public audits
Featured Projects
View all projectsspoor
Rust CLI to inspect public GitHub footprints across profiles, repos, commit identities and keys.
crucksware
Rust prototype for semantic diff and triage of extracted firmware rootfs trees. Text and JSON reports. Experimental, no release yet.
recherche-messageries
Source-based comparison of secure messaging apps: threat models, metadata, public audits and limits.
privacysecure-messagingthreat-modelingmkdocs+2
LanguagePythonStars1Forks0Watchers1
Recent Writing
View full blogAre AI Mega-Prompts Really Better?
Are huge AI-generated prompts really better? A look at instruction overload, long-context limits, prompt optimization and context engineering in 2026.
Root-Me sudo : exploiting a sudoers wildcard with path traversal
Root-Me write-up of a sudoers misconfiguration where an overly broad wildcard allows ../ path traversal to read .passwd with another user's permissions.
Learning Rust While LLMs Keep Getting Better at Coding
I’m seriously learning Rust while LLMs keep getting better at coding. A personal look at learning, coding agents, and what I still want to understand.
GitHub Activity
GitHub ProfileProfile statistics and curated public projects.
GitHub Profile Statistics
Public metadata from profile and all public repositories.
Followers 0Following 1Repos 8Stars 10Forks 0
Featured Projects
Curated open source projects and research repositories.
View full GitHub profileMost Starred Repositories
Languages Used
Monthly Repository Activity
Activity history not configured.
GitHub Insights
Data calculated across all public repositories and GitHub profile.
Research Topics
What do public GitHub metadata actually expose in practice, and where do verified facts end and inferences begin?
Public Footprint
Which messaging app satisfies a specific threat model, and what network metadata remains exposed?
Messaging Trade-offs
How to effectively diff and triage extracted Linux firmware rootfs trees with minimal noise?
Firmware Diffing
Explore & Verify
Explore Source Code
Browse public repositories on GitHub, inspect commit histories, and run the tools locally.
Public RepositoriesRead Articles
Check technical notes, write-ups, and methodological comparisons on the blog.
Browse blogResources & Links
GitHubGitHub
Public software projects and source-linked research
Portfolio
Main portfolio, writing and project documentation
Spoor
Terminal-first GitHub public-footprint inspection tool in Rust
Crucksware
Semantic firmware diff and triage in Rust
Recherche Messageries
Source-based research comparing secure messaging architectures
FAQ
What do you work on?
Mostly on Rust CLI tools (Spoor, Crucksware) and comparative research on secure messaging. Everything is documented with the actual limits of each project.
What is Spoor?
A Rust CLI to inspect public GitHub footprints: commit identities, SSH/GPG keys, and structured exports.
View SpoorWhat is Crucksware?
A Rust prototype to diff two extracted firmware rootfs trees and produce clean text or JSON reports. Experimental work.
View CruckswareWhat is your stack?
Rust for CLI tools and low-level work, Python for scripting and data analysis, TypeScript / Next.js for the web.
Are the projects open source?
Yes, public projects are licensed as open source (typically MIT or Apache 2.0). All code is on GitHub.
GitHub ProfileWhere are the write-ups?
The Blog section collects technical notes, tool breakdowns, and write-ups in French and English.
Read blogFrom Ideas to Tools
I focus on:BuildInspectTestExploreCompare
I explore systems and privacy through Rust tools and source-backed research. Public repos show implementation choices and real boundaries for each tool.
Code is on GitHub, write-ups live here. Anything experimental or in progress is documented as-is, without hype.
Stack & Tools
Project Directions
Spoor
Public GitHub footprint inspection in Rust: profiles, repos, commits, and keys.
Crucksware
Semantic diff of two extracted firmware rootfs trees in Rust with text and JSON reports.
Messaging
Source-linked comparison of encrypted messengers across threat models and metadata.
Tools & Project Context
Implementation details live directly in the open source code.
// Spoor: GitHub inspection in Rust
CLI tool + HTTP service
Profiles, repositories, commit identities, keys
Observed data and explicit inference limitsSpoor Demo
Real Spoor Capture
Spoor inspects public GitHub metadata for an account or repository: commits, SSH keys, repos, and signatures.
The terminal below is a static replay of a real run of `spoor torvalds` captured with the Rust binary (commit 7d49428, Oct 19, 2026). It does not execute live on each page visit.
No fabricated data: metadata, languages, and volume match the public scan output directly.
terminal.exe
Understanding Results
Observed Data
Metadata extracted from public endpoints: profile info, public repos, SSH keys, and sampled recent commits.
Derived Values
Aggregated metrics (stars, forks, language breakdown) computed across the discovered public repositories.
Limits & Quotas
In fast mode, Spoor adheres to unauthenticated GitHub API rate limits and bounds commit depth per repository.