Kizuno

Own and operate a multi-target Tibia botting platform — bot cores, web dashboard, infra, payments, anti-detection layers. Started May 2024, opened to paying customers in October 2024. Main, ongoing project.

• Designed the customer-side runtime + anti-detection layers behind KizuBot
• Built the Next.js + MariaDB dashboard at painel.kizubot.com (auth, billing, real-time machine grid)
• Operated the hardened VM fleet used by remote customers
• Reverse-engineered private Tibia game-protocol surfaces to keep the platform compatible

Co-founded CoreGuard, an anti-cheat SaaS for OTClient-family clients. Backend + dashboard developer end-to-end (real-time WebSocket protocol, ~50 REST endpoints, multi-tenant auth, production Docker stack, React frontend).

• Co-founded CoreGuard and shipped the customer-facing dashboard at coreguard.com.br
• Wires into the inivbt/SentinelCore anti-cheat DLL (per-module signed config, RSA-SHA256, ISRG/LE cert pinning) which I also co-author upstream

Tech lead on the PokeAlliance OTClient — own every layer of the client end-to-end: C++ core optimisations, Lua game scripts, OTUI / module UIs. Modernising and evolving the whole surface.

• Owning the full client stack: C++ engine perf work, Lua script architecture, OTUI / module UI redesigns
• Modernised the legacy OTClient UI module set against the PSB design spec while keeping 100% gameplay parity
• Drove the CoreGuard anti-cheat handshake (opcode 1562 + DLL) and the v2 challenge-response wire (HWID binding, secret-out-of-binary) into the client
• Set up the Windows CI and the MinGW Linux cross-compile path so contributors can build without MSVC
• Co-maintainer-level contribution flow on tanjirokamadoserver/PokeAlliance_Client (12+ merged PRs in May 2026 alone)

Contracted security-hardening engagement on ZeroBot for Cjaker. Scope: reverse engineering of the launcher + runtime, paired with hardening recommendations delivered as a private report. Findings and dates withheld per agreement.

• Closed-scope binary-RE + security hardening engagement on the ZeroBot launcher and runtime
• Deliverable: a private hardening report only the contracting party sees

Built the cavebot Actions language and the Recorder UI for inivbot.com.br on the RubinOT RTC Client.

• Shipped CheckBless / CheckSupply actions with YES / NO branch routing
• NPC dialog automation, including boat NPCs and auto-selling item lists
• Recorder with editable waypoints, auto-record, reorder, and `script.ini` save/play

Built and maintained a Baiak 999x Tibia server (mounts, auras, wings) on a heavily modified TFS C++ codebase, plus the game's web portal stack.

• Shipped new TFS systems in C++ — mounts, auras, wings, custom content pipelines
• Authored Python codegen for items/monsters/spells (JSON → XML + Lua)
• Packaged the server as a multi-stage Docker image with MariaDB + Nginx reverse proxy
• Owned the PHP web portal (big_website) and led its Next.js migration (bigot-next)

Shipped custom OTClient builds and protocol-level tooling for the Tibia/OTServ community.

• Authored custom OTClient forks (kizu-otc) tailored for botting/anti-cheat use cases
• Built socket-level Tibia clients in Rust and TypeScript (tibia-bot-rs, tibia-coins-checker)

Wrote and sold casino/automation scripts on the (then-dominant) Tibia Global botting platform.

• Earliest commercial dev work; first contact with packet captures and debuggers