I learn how systems break by building them.
Taco Roumen, Cyber Security student in Eindhoven. I work on security, infrastructure and the hardware in between.
About
I'm an IT student from Eindhoven, drawn to the systems layer: security, infrastructure and the hardware underneath. I want to understand how something is built so I can see how it breaks.
I specialise in red teaming and I'm doing my graduation internship. Most of my projects touch the physical world: radio links between ESP32 boards, Go services and tooling, and hardware wired into Home Assistant.
$ cat now.txt
- studying
- Cyber Security, specialising in red teaming
- running
- TrueNAS server with around 50 self-hosted apps
- building
- Hardware and software, from ESP32 devices to Go tools
Projects
Security labs, services and hardware, ranked by stars and forks on GitHub.
RF Lab: replay attacks on 2.4 GHz IoT
A hands-on lab that shows why cheap radio links need more than a shared address. ESP32 boards with nRF24 radios switch a lamp, a logger board records the traffic, and a hardened pair with AES-128 and a rolling code rejects old packets.
AIS-Sim: ship tracking on a table
A scale model of maritime AIS. ESP32 ship nodes report positions over nRF24 to a shore station that feeds Signal K. It shows what an unauthenticated tracking feed does with a flood of fake vessels.
SmartSpray
Irrigation for Home Assistant on an ESP32 with ESPHome. It schedules and controls watering zones and runs fully local, with no cloud dependency.
Microsoft SSO verification
A Go web service that checks identity through Microsoft single sign-on. It trades an OAuth2 authorization code for an access token, then reads the user's profile from Microsoft Graph to gate access.
Gatekeeper: licence-plate access
Parking access from end to end. A Go API handles reservations and users, an ESP32 drives the gate through ESPHome, and a Python service reads plates with OpenCV and Tesseract.
Go web scraper
A concurrent web scraper in Go. It fetches and parses pages with goroutines, as an exercise in Go's concurrency model and HTML parsing.
Alarmo touchscreen keypad
ESPHome firmware for a WT32-SC01 Plus touchscreen keypad that drives the Alarmo alarm panel in Home Assistant.
Requestrr
A maintained fork of Requestrr, a Discord bot for requesting films and series through Sonarr, Radarr and Overseerr.
OT honeypot
A Docker honeypot from a school team project. It emulates SSH, Telnet, MQTT, CoAP and Modbus and maps where connections come from.
Homelab
Most of my hands-on infrastructure and security work happens here. A TrueNAS SCALE box runs production with around 50 self-hosted apps. A three-node Proxmox cluster serves as the lab and stays off until I need it. Everything sits behind Authentik SSO and a reverse proxy, with AdGuard for DNS filtering and Uptime Kuma, Grafana and Prometheus for monitoring.
Platform
- TrueNAS SCALE
- Proxmox VE
- Docker
- Portainer
- Dockge
Identity and access
- Authentik SSO
- Vaultwarden
- Headscale
- Headplane
- Tailscale
Network and DNS
- Cloudflare Tunnel
- AdGuard Home
- DDNS Updater
- netboot.xyz
Monitoring
- Uptime Kuma
- Grafana
- Prometheus
- Scrutiny
- Speedtest Tracker
Dev and apps
- GitLab CI/CD
- Nextcloud
- Jellyfin
- Whisper and Piper
Skills
Security
- Red teaming
- RF and IoT security
- OAuth2 and SSO
- Network security
- Recon and OSINT
Languages
- Go
- Python
- C++
- PowerShell
- Bash
- SQL
Hardware and embedded
- ESP32
- nRF24
- ESPHome
- HackRF
- Proxmark3
- Home Assistant
Infrastructure
- Linux
- Docker
- Git
- REST APIs
- MySQL
- DNS and DNSSEC
Contact
Internships, projects or a question about something here. Email works best.