~/samwolfs $ whoami

sam wolfs aka i12bp8

i break software for good reasons and take hardware apart for questionable ones. student at Howest, based in Ghent — a beautiful medieval city i mostly see through a monitor glow.

scroll, or leave a note in the guestbook

what i actually do

offensive security

web apps, mobile apps, APIs, auth flows, the weird backend corners nobody documents. bug bounty hunting and breaking things (with permission) is my favorite kind of homework.

burp suiteAPIsandroid/iosbug bounty

ai, unreasonably enthusiastically

i've been building with AI since before it was a LinkedIn personality trait. ML lenses, agents, AI-assisted tooling, automation — if a model can be duct-taped into a workflow, i've probably tried it.

LLMsagentsMLautomation

hardware & protocols

every electronic device i own eventually gets opened. IR, RF, NFC, firmware, undocumented protocols — physical systems that are fun to poke at until they confess.

flipper zeroIR/RF/NFCfirmwaresoldering iron

things i've shipped

TagTinker

flipper zero app for hacking infrared electronic shelf labels. went viral, got covered by Hackaday, and taught a lot of supermarkets nothing because it's research-only.

1.7k ★ · featured on Hackaday · hackaday write-up

pharma API disclosure

found severe vulnerabilities in pharmaceutical APIs serving thousands of pharmacies during a school project. responsibly disclosed. the most stressful 'A' i've ever earned.

responsible disclosure · school project

wmbuster

passive wireless M-Bus listener for the flipper zero. your utility meter is chattier than you think — this just politely listens.

129 ★ · RX-only

flipper-mobib

reads and decodes belgian MOBIB transit cards. holder info, contracts, journeys, metro stations. read-only by design, because i like my transit card working.

calypso · ISO 14443-B

AR/ML lenses @ snapchat

in a previous life i built AR and ML lenses with scripting, APIs and machine learning for ~150k followers. yes, before it was called 'gen AI'. no, i will not do the dance.

~150k followers · AR + ML

glif.app

freelanced ~9 months building AI workflow things for glif. professional confirmation that i will in fact play with AI tools for money, not just for free at 3am.

freelance · 9 months

leave something behind

a tiny public filesystem. write a .txt for whoever scrolls by next, or read what strangers left before you. plain text only, nothing executes, be nice.

visitor@i12bp8.xyz — /srv/guestbook
mounted /srv/guestbook (read-write, public).
type 'help' to get started, or 'ls' to snoop.
~

the human parts

ghent, belgium

living in a city where the medieval castle has better uptime than most APIs.

music 24/7

audiophile with a DAC/IEM budget problem. the music literally never stops. it's a feature, not a bug.

nintendo

lifelong nintendo enjoyer. yes i've modded consoles. no further questions.

3d printing

had an ender 3 s1 pro. it died doing what it loved (jamming). rebuilding the print farm eventually.

travel & nature

occasionally i touch grass, professionally. mountains and forests are excellent places to not think about auth tokens.

being human

i deal with mental health stuff like a lot of people do. saying it out loud so someone reading this feels less alone.

say hi

got a project, a bug, a weird device, or an opinion about IEMs? my inbox is open and, unlike some APIs i've tested, properly authenticated.