Currently
I’ve been shipping software in the Tibia / OTClient / RE space since I was 14. Today that means LuaJIT inline hooks, Rust workspaces, Tauri desktops, Next.js SaaS dashboards, and OTClient module support across Tibia 7.4 → 15.40.
Public Twitch bot focused on 100% human-like behaviour — driven by browser automation (undetected-chromedriver), voice/mention recognition, real cookie sessions.
Pythonundetected-chromedrivermultiprocessingsocket IPC
WhatsApp bot that hit 60k users across 2k groups before Meta forced the upstream lib offline. My JavaScript bootcamp.
60kusers2kgroups
Node.js@open-wa/wa-automateffmpegaxioscheerio
Inline-hook framework for the Lua C API in statically-linked LuaJIT games.
C++20mingw-w64LuaWine/BottlesDocker
Dual-platform low-level systems library — anti-VM evasion, binary patching, LuaJIT hooking. Packaged as an LD_PRELOAD shim and a Windows DLL.
CLinux LD_PRELOADWindows DLLLuaJIT
9-crate Rust workspace — Tibia protocol, crypto, ECS, scripting. Benchmark: 200 `tibia_socket` processes at 57–71% CPU on a 1 vCore / 2 GB OVH starter.
200concurrent procs57–71%cpu
Rustbevy_ecsmluatokio
Baiak 999x Tibia server (bigot.com.br) — modified TFS C++ core with mounts, auras, wings, plus a custom DB-backed servos (companions) system and a legacy-character import pipeline.
C++LuaTFSDockerMariaDB
Docker gaming sandbox that runs Windows MMOs on headless Linux with NVIDIA passthrough, Selkies WebRTC streaming, and a 12-vector anti-VM-detection stack plus an inline LuaJIT hook for in-game bot loading.
4image layers12anti-detection vectorsVNC + WebRTCremote access
DockerUbuntu 24.04CUDAProton-GEDXVK
28-step Packer-in-Docker pipeline → one-click Windows 10 IoT LTSC RE lab on Hetzner, ~3–4 min per VM, 20 in parallel, MCP gateway for Claude/Windsurf to drive RE remotely.
28build stages3–4 minboot/VM20parallel VMs~9 GBimage trim
PackerDockerWindows 10 IoT LTSCHetzner CloudCloudflare Tunnel
Co-founder + backend & dashboard dev for CoreGuard anti-cheat — coreguard.com.br. Real-time WebSocket protocol, ~50 REST endpoints, multi-tenant auth, production Docker stack.
Next.jsTypeScriptWebSocketDockerMulti-tenant
Private pure-API-request viewer bot — Go core + Tauri 2 desktop shell. Production proof: 101 sustained viewers in one Docker container, four-figure broadcast views, real PayPal payouts.
101concurrent viewers14.2kbroadcast views$125payout (1 day)
GoTauri 2ReactTypeScript
User-facing dashboard for KizuBot at painel.kizubot.com — bot config, VNC machine management, Kizu Assistant (Gemini), live GridView, hunting stats.
Next.jsTypeScriptStripeGemini API
WhatsApp automation SaaS with atomic warm-up, spintax, and RLS-per-table.
TypeScriptPostgreSQLBaileys
Gesior → Next.js 16 rewrite of the bigot.com.br portal (Jan 2026) with a browser-native ItemEditor + SPR + ObjectBuilder rolled into a single ~99% ObjectBuilder-parity admin tool.
90Next.js pages55API handlers30+editor components~99%OB parity (internal)
Next.js 16React 19TypeScriptTurbopackTailwind 4
First-party server-side conversion gateway on Cloudflare Workers — 4-worker monorepo fanning conversions out to 9 vendor CAPI/EAPI endpoints with same-origin first-party hosting, 7d dedupe, 90d click-ID attribution.
4workers9vendor APIs7ddedupe window90dattribution
Cloudflare WorkersTypeScript 6Zod 4Cloudflare ZarazAnalytics Engine
Contract for inivbot.com.br on the RubinOT RTC Client. Built the cavebot Actions DSL (CheckBless / CheckSupply / NPC dialogs / boat NPCs / auto-sell / labels / bookmarks / lure / delay / say / use-with) and the Recorder UI on top of it.
External PokeXGames bot in C# / WinForms (.NET 4.7.2) — co-developed with Cjaker around 2019. Not all original build assets could be recovered to render a faithful live screenshot, so the panels below are pixel-accurate reconstructions rendered from the project's `.resx` resource files (control names, exact Location / Size / Text, and the original embedded `Discord.ico`). The layout — what was on each tab, what the controls were called — is therefore authentic; the visual style is a faithful WinForms mock.
18-screen tour of the live KizuBot painel at painel.kizubot.com. Logged in to a real machine + character; every bot tab, the machine setup, the GridView, statistics, alarms, the humanization tuner — the whole user-facing surface.
10-screen tour of the Tauri 2 launcher for the CoreGuard anti-cheat OTClient. This build is exclusive to Exordion — the custom 7.4 Tibia server (Bravora / Legacy / Aegis worlds). Captured against a stubbed Tauri invoke layer to walk every pipeline state — scanning, integrity error, update download, PLAY, engine select, news carousel, settings.
23-screen tour of the private mongebot-go Tauri 2 desktop app captured against a local mock backend. Onboarding wizard, dashboard, profiles, proxies, tokens, stream monitor, scheduler, logs, settings, about, keyboard help — the whole control surface.
Personal module panel for botting on RubinOT. Nine player-facing helpers — quality-of-life, looting and movement utilities, plus an exposed RTC terminal.
KizuBot is my own multi-target Tibia botting platform — bot cores, dashboard at painel.kizubot.com, docs, changelog, store. Started May 2024, opened to paying customers in October 2024, still the active flagship. I own every surface here: the landing (lp-kizubot), the docs site, the changelog, the store, plus the painel + the core API + the alarm service.
Live dashboard for the CoreGuard anti-cheat at coreguard.com.br. My role: backend + dashboard developer. Real-time WebSocket protocol, ~50 REST endpoints, multi-tenant auth, production Docker stack. Talks to the inivbt/SentinelCore DLL (per-module signed config, RSA-SHA256, ISRG/LE cert pinning).
Live info-product landing at pascoagrana.org. Next.js 15 + React 19 + Tailwind + shadcn-ui (v0.dev scaffold) wired into a full paid-marketing stack: Meta / TikTok / GA4 pixels, GTM, Clarity, AdSense, UTMify, A/B tests, and a first-party analytics proxy (`KizuMetrics`) fronted by Cloudflare Workers at m.pascoagrana.org. Where I learned SEO and paid-campaign mechanics across TikTok / Facebook / Instagram / Google in production.
Live portal for the Baiak 999x server at bigot.com.br. `bigot-next` (my Next.js 16 rewrite of Gesior) serves the public site; `BIG-OT` (the modified-TFS C++ server I shipped 2023–2025) runs the game behind it.
Customer-facing SaaS that turns in-game OTClient events into WhatsApp alerts. The `alarm-panel` SPA (React + Vite + Supabase + 3 Deno edge functions) lets the customer sign in, manage WhatsApp sessions, fire test messages, configure alarms and rotate API keys; the panel's `generate-script` edge function emits a triple-nested Hydra SPN-cipher-obfuscated Lua module with anti-sandbox checks that the customer drops into their OTClient. Backed indirectly by `alarm-kizubot` (Baileys + Telegram). Public repo: github.com/Kizuno18/alarm-panel.
Production artefacts from the Twitch automation stack (private `mongebot` Docker fleet + public YaBoi humanization branch). Six screenshots covering the bot driving live viewer counts, the resulting Twitch analytics, geographic spread, and the actual ad / bits revenue and PayPal payouts the operation generated.
Built a skin-changer module for OTClient on HadesOT back when the server officially only supported the Cipsoft client. Required running a private OTClient build against the live Cipsoft protocol and swapping outfit/look bytes client-side without server cooperation.
99%-functional mining bot for the Demolidores server (demolidores.com.br): opens a password-protected cast, auto-reconnects and repositions, manages multiple miners through a proxy pool to bypass the 4-MC limit, parses the `using the last pick` textMessage to confirm mining, counts pepitas in real-time, calculates per-hour rate, and uses a keyword + challenge handshake to drop pepitas at the leader's feet for collection.
Production density benchmark of the `tibia-bot-rs` socket core: 200 concurrent `tibia_socket` processes running on a 1 vCore 3.6 GHz / 2 GB RAM / 40 GB SSD OVH starter VPS at 57.1% user + 41.3% sys CPU, ~10 MB RES per process, ~1.5 GB total RAM in use.
Show-off of the local Docker workflow for OTServ that replaced the old VM cycle. Learned from marcoshps11 in 2023 with help from the Configurando Docker no Windows — Adeus VM topic by marcos on tibiaking.com. Published on YouTube as `[Show off] ABRINDO OTSERV EM 3 MINUTOS — Docker` (2024-09-27).
Live ChatGPT bot that runs entirely inside an OTClient-based Tibia server. A Lua module (`libs/chatGPT.lua` on `kizuLibrary@v2`) hooks the `onTalk` event for private messages and forwards them over `HTTP.postJSON` to a local Python/Flask `pipe.py` proxy on `127.0.0.1:8080`, which maintains per-player session state and relays to OpenAI's `text-davinci-003` Completions API. Hard caps: 8 concurrent conversations, 3-minute idle timeout, ≤200-char chunked replies at 4 s intervals to stay under the game's chat rate limit; `encerrar` keyword ends a session early. Lua code first committed 2023-06-17 (commit `1deb480`); demo video shipped 5 weeks earlier on 2023-05-10.
A single-night protocol-socket exercise that pushed baiak-icewar from a ~65-player baseline to a 217-player peak on otservlist (logged at 2023-10-15 04:14). Filed as a `[Show off]` retroativo to back the public claim that otservlist's spoof-detection was selectively enforced. OTLand thread: https://otland.net/threads/fake-characters-he-said-xinn-a-black-hole-of-ignorance.286599/
From-scratch C++ recreation of ElfBot, shipped inside the BigOTC OTClient build, hardened against reverse engineering (compile-time XOR string obfuscation, opaque typeinfo via class renames, fmt::runtime error formats, hidden visibility, dead-code stripping, paired-binary-diff release gate).
Active client engagement: modernising the in-game UI of an OTClient-family client without touching gameplay. Yellow-medieval layouts → dark, dense, search-able panels with consistent affordances.
Pokémon Captured
VIP / Friends list
Pokémon Seller
Active contributor to opentibiabr/otclient — vBot/forge bug fixes, Android build modernisation, encryption + animation crash fixes, Monk vocation support across the bot scripts.
Finished and shipped Bob's stalled `pr/627` branch — adds the delay before requesting the OTP that fixed the new pairing-code path on the maintained TypeScript WhatsApp Web library. The merged commit was subsequently mirrored into ~17 downstream Baileys forks (visible via `gh search/commits`).
Dockerfile fix that strips trailing whitespace/newline from the vcpkg-commit-id extraction in `vcpkg.json` — `git checkout` was failing with `pathspec '...?' did not match any file(s)`. Picked up by at least five downstream canary forks.
OTX Tibia server fork — added a `getOutfitByLookType` Lua helper.
2024 — present
CurrentKizuBot.com
Own and operate a multi-target Tibia botting platform — bot cores, web dashboard, infra, payments, anti-detection layers. Started May 2024, opened to paying customers in October 2024. Main, ongoing project.
2026 — present
CurrentCo-founded CoreGuard, an anti-cheat SaaS for OTClient-family clients. Backend + dashboard developer end-to-end (real-time WebSocket protocol, ~50 REST endpoints, multi-tenant auth, production Docker stack, React frontend).
2026 — present
CurrentTech lead on the PokeAlliance OTClient — own every layer of the client end-to-end: C++ core optimisations, Lua game scripts, OTUI / module UIs. Modernising and evolving the whole surface.
Private engagements
ZeroBot (zerobot.net) · Cjaker
Contracted security-hardening engagement on ZeroBot for Cjaker. Scope: reverse engineering of the launcher + runtime, paired with hardening recommendations delivered as a private report. Findings and dates withheld per agreement.
Feb 2026
Built the cavebot Actions language and the Recorder UI for inivbot.com.br on the RubinOT RTC Client.
2023 — 2025
bigot.com.br (Baiak 999x)
Built and maintained a Baiak 999x Tibia server (mounts, auras, wings) on a heavily modified TFS C++ codebase, plus the game's web portal stack.
2016 — 2019
Independent
Shipped custom OTClient builds and protocol-level tooling for the Tibia/OTServ community.
2014 — 2016
Xenobot.net community
Wrote and sold casino/automation scripts on the (then-dominant) Tibia Global botting platform.
Reverse engineering
Systems
Backend
Frontend
Infra & ops
2014
Started at 14 reverse-engineering casino bots on the (then-dominant) Tibia Global botting platform. First contact with packet captures and a Windows debugger.
2015–2017
Two formative years working under Cjaker — creator of ZeroBot (zerobot.net) and a respected figure in the OTServ community. Shaped how I communicate, how deep I go on a problem, and how long I'm willing to stay with it.
2015–2017
Three years deep in modded Minecraft: Forge mods, server admin, modpack tuning. Touched 1.2.5, 1.5.2, 1.7.10, 1.8, 1.12.2 and ran A Era do Futuro / A Era do Futuro 2, FTB Infinity, FTB to the Sky, FTB Evolved. First time meeting Java, JVM tuning, and the shape of Minecraft server stacks.
2016–2019
Fell into the OTClient (C++/Lua) ecosystem. Learned socket/packet structures, opcode tables, encryption layers, and how to build custom clients that the official protocol would still accept.
2017–2019
Before otcv8 and otclient-redemption/mehah were a thing, I wrote a custom ElfBot from scratch in Lua to play on "The Heroes of Time" (later HeroesOT). First real product I shipped end-to-end on the OTServ side.
2018
While building a multi-character login button on top of OTClient, a malformed query in my own code surfaced a SQL injection in HeroesOT's `protocolLogin` (login/password inputs). I ended up logged in as the server's admin by accident. That bug was the moment glitches and exploits became a real interest.
2019
Spent 4 months building an external bot for PokeXGames alongside Cjaker. First real RE work — pointer scanning, offset structures, and hands-on time with x64dbg, OllyDbg, and Fiddler.
2019
Playing Digimon Masters Online on Steam at the time. Cjaker walked me through cracking the famous ExpertHax DMO bot (https://experthax.com) by analysing its outgoing payload — first time I really learned to read HTTPS traffic in Fiddler and reason about a paid bot's licensing wire-format.
2022–2024
Built a full Twitch automation suite — multi-stream viewing, account creator, token + revenue manager, bits/subs/comments/VOD views, partner+affiliate accounts, channel points, lurk, chat ads, SEO. Two parallel branches: public YaBoi (C# → Python) focused on 100% human-like browser behaviour, and the private API-request implementations (mongebot Python → mongebot-go Go) that handled scale. Reached elite tier in under 2 months. Eventually handed dashboard-inflation methods to the two largest names in Twitch botting after they couldn't crack them. Heavy schooling in web crypto and network protocols.
Mar 2023
Released the first version of the Kizuno18 WhatsApp bot. It hit 60k users across 2k groups before Meta forced the upstream library (@open-wa/wa-automate) to stop. Also my real JavaScript bootcamp — command dispatch, async I/O, FFmpeg media pipelines, group event handling. Source is now public on GitHub.
May 2023
Shipped a 99%-functional cast-driven mining bot for the Demolidores server (demolidores.com.br): proxy pool bypasses the 4-MC limit, auto-reconnect + reposition, anti-idle, real-time pepita counter + per-hour rate, textMessage parsing to confirm mining, keyword/challenge handshake to drop loot at the leader's feet. Each miner ran at ~0–0.7% CPU and 100 MB RAM on a Ryzen 9 6900HS / 40 GB DDR5.
2023
After Meta forced `@open-wa/wa-automate` offline, ported the WhatsApp work to Baileys and used the move as an excuse to migrate every JS codebase I owned to TypeScript. From this point on, all my Node/Next.js work is TS-first.
2023
Learned Ghidra properly alongside Sharingan, Luckez and Ryanzin — the point where reverse engineering stopped being pointer hunts and started being real binary analysis: decompilation, RTTI extraction, control-flow tracing, scripting the disassembler.
2023
Picked up Docker properly under marcoshps11. Replaced the old VM workflow with containers — `docker compose up` and an OTServ instance is live in ~3 minutes instead of a half-day VM rebuild. Published as a `[Show off] ABRINDO OTSERV EM 3 MINUTOS — Docker` later (2024-09-27).
Aug 2023
Started two years on the Baiak 999x server: heavily modified TFS C++ core, new mounts/auras/wings systems, custom DB-backed servos system, Python codegen for game data, Docker production stack, legacy-character SQL bridge.
Oct 2023
A one-night demonstration: opened raw protocol sockets against baiak-icewar to push its otservlist player count from ~65 baseline to a 217-player peak in minutes (chart at 2023-10-15 04:14). The point was to back a public complaint that otservlist's spoof-detection was selectively enforced — large servers paying to keep their listings safe. Posted as a `[Show off]` after the OTLand thread.
Nov 2023
One of the sponsors of the Bot V8 port (originally otcv8) into the mehah/otclient codebase — landed in commit `11cecb8c3` on 2023-11-21 (`feat: v8 Bot`). Credited in the upstream README alongside @luanluciano93, @SkullzOTS, @kokekanon and @FranciskoKing — https://github.com/mehah/otclient
May 2024
Started building KizuBot in May 2024 — a multi-target Tibia botting platform with its own bot cores, dashboard, infra, and billing. Opened to paying customers in October 2024; still the active flagship today.
2024
Picked up IDA Pro under Caio Cesar. Crossed the gap from Ghidra-only to working comfortably in both — function recovery, type propagation, IDC/IDAPython automation.
2024–2025
Shipped Sentinel Core (anti-cheat for OTClient), the kizuno-vm hardened gaming sandbox, mongebot-go (Go+Tauri), and the tibia-bot-rs Rust workspace (9 crates).
2025
Spent the year picking up real network + datacenter operations from three hosters: Pietro Albano at MeteorCloud (AS210554), Lucas Silva Oliveira at MagnoHost, and André at LATAM Data Center. Hands-on with physical hardware, BGP, IX.br peering, link-redundancy design, port / Mb / Gb capacity planning, and general telecom flow. First time stepping inside a real DC floor at Ascenty SP4 (9.2 MW, ~7,200 m², N+1, Osasco / São Paulo).
Early 2025
Learned Next.js (App Router) properly while building dash-kizubot. Now my go-to for full-stack work — every TypeScript project since lives on this stack.
2025
Contracted to hunt Lua-side vulnerabilities and crack-paths in inivbot.com.br. One straight month doing nothing but reverse engineering — first proper exposure to `.pdb` symbol files, RTTI walking, loaded-module enumeration inside a running process, `mitmproxy` for HTTPS interception, and Windows named pipes as an IPC surface. Biggest single jump in RE skill so far. The keepers from that month live in the public `windows-reversing` repo (https://github.com/Kizuno18/windows-reversing) — toolset + the Ghidra scripts that hunt LuaEngine internals.
2026
Rewrote the earlier Lua ElfBot directly inside a private fork of otclient-redemption as a plug-and-play `.cpp` / `.h` module. Moving the bot out of Lua into the engine itself defeated the trivial Lua-string leaks that made the old version easy to copy — much harder to lift from a stripped binary.
Jan 2026
Wrote bigot-next: a from-scratch Next.js 16 rewrite of Gesior (the OTServ PHP CMS) for bigot.com.br — characters, guilds, highscores, sales, account flows, all hitting the live game MySQL directly.
2026
luahook, kizuEx, windows-lab — RE tooling productised: inline hooking across LuaJIT games, dual-platform shims, reproducible Windows RE labs with Ghidra/IDA-headless MCP servers.
Contact
Open to RE work, anti-cheat, OTClient consulting, and full-stack SaaS.