Hardware

offensive hardware designs, both released and gated. Open boards link to KiCad sources; restricted-release projects are listed without artefacts.

── released ──────────────────────────────────

DE001 / DE002 IR Modules

DE001 REV A, DE002 REV A

A simple, cheap, easy-to-build pair of 940 nm IR modules. DE001 is the transmitter, DE002 is the receiver. Originally built as the hands-on starter kit for the IR Exit Sensor hacking workshop at BSides London 2025, giving attendees the basic IR primitives to work through before the full IR Ingress device was demonstrated. They also see regular use as bench test gear for my own IR research. KiCad sources, manufacturing outputs (gerbers, drill files), and a full datasheet are in the ir-modules repository, released under the MIT licence.

github

── restricted release ────────────────────────

IR Ingress Rev2

restricted release

IR Ingress is a purpose-built tool for defeating touchless exit sensors: the "wave to exit" request-to-exit (REX) devices mounted inside many access-controlled doors. Those sensors trigger on infrared, so IR Ingress beams modulated near-infrared through the glass facade from the pavement outside and fires the sensor as though someone inside had waved to leave. The door releases: no cloned badge, no force, nothing left behind. The concept was demonstrated publicly at BSides London 2025 alongside the open-source IR Modules starter kit. Rev2 is a custom PCB with a tuned emitter array built for range and reliability through glass.

The design is kept restricted rather than open-sourced because of the eye-safety risk of the near-infrared it emits: NIR is invisible and never triggers the blink reflex, so an emitter powerful enough to reach through a glass facade at range could damage the eyesight of anyone who doesn't understand the hazard. Access to the project is available on request to offensive-security practitioners known to me.