01 · Roasts
Protocol hoarder
edl, mtkclient, and ida_rpc collectively turn USB, bootrom, and reverse-engineering protocols into a very productive rabbit hole.
Tests are selective
exploit_me validates 29 levels on two architectures, while edl and mtkclient ship major device tooling with no test suites.
Fork magnet
7,158 total stars and 1,577 forks say the tools escaped the lab; Loaders alone pulled 146 forks despite minimal automation.
Horizontal builder
189 sampled recent commits across repositories is a portfolio, not a side project—though 246 yearly commits keeps the cadence short of daily-machine territory.
Built using
Zoral
Shadows one worker for a week, then takes over their job with zero extra setup. Behaves exactly like the original.
zoral.ai
02 · Category breakdown
- Impact25% weight83A
- Consistency20% weight65C
- Quality20% weight72B
- Depth15% weight65C
- Breadth10% weight65C
- Community10% weight65C
03 · Stats
365-day commit heatmap
168 active days
Language distribution
- Python84%
- Verilog4%
- C4%
- Tcl4%
- C++3%
- HTML0%
- Other1%
04 · Numbers
Owned repos
non-fork
24
Commits
last 12 months
246
Followers
2,644
Joined GitHub
Jan 2014
05 · Top repos
bkerler /
exploit_me
A widely adopted ARM/AArch64 exploitation training lab with 29 deliberately vulnerable techniques, architecture-specific builds, solution walkthroughs, and automated 32/64-bit exploit validation.
bkerler /
edl
Mature Qualcomm EDL reverse-engineering toolkit with 2,564 stars, broad Sahara/Firehose/Streaming/Diag functionality, a packaged CLI/API, and substantial protocol-specific implementation, though it lacks tests and static typing.
bkerler /
mtkclient
A widely adopted MTK flashing and repair utility with 1,140 stars and 223 forks, substantial Python protocol, USB, exploit, crypto, and partition modules, plus README, GPL-3.0 licensing, and GitHub Actions lint validation.
bkerler /
ida_rpc
A substantial, documented IDA Pro automation daemon with a broad RPC/CLI surface, cross-platform local transport, lifecycle management, and regression tests, but no CI and no static typing.
bkerler /
ghidra_installer
A widely useful, MIT-licensed Bash installer for Ghidra with cross-platform package setup, release discovery, upgrades, desktop integration, and optional 4K scaling.
bkerler /
Loaders
A widely forked 83 MB EDL loader archive with a clear device-repair mission and ongoing activity, but limited observable engineering structure: no tests, CI, license, typed language, or sampled source files.
bkerler /
xsr3_reconstruct
A focused Samsung XSR3/XSR2 flash-reconstruction toolkit with substantial binary parsing and media-validation utilities, but modest public adoption and no automated test or CI layer.
06 · Timeline
- Jan 4, 2014Joined GitHub
- Jan 2, 2018Created exploit_me — Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 29 vulnerability techniques)
- Nov 21, 2018Created edl — Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
- Mar 6, 2019Created ghidra_installer — Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
- Jan 15, 2021Created Loaders — EDL Loaders
- Jul 11, 2025Created xsr3_reconstruct — Tool for reconstruction of Samsung XSR3 Flash Transaction Layer
- Jan 18, 2026Created mtkclient — Mediatek Flash and Repair Utility
- Jun 9, 2026Created ida_rpc — IDA Pro RPC for assisted RE-tasks
- Sep 1, 2026Most recent push to mtkclient
07 · Compare
08 · Rubric
How this score was produced
Overall = Σ (category × weight) + gentle top-end curve
Tier thresholds
▸ How the pipeline works
- 01Scrape.Pull every non-fork repo pushed in the last 90 days, plus your contribution calendar, followers, and language byte counts — straight from GitHub's REST & GraphQL APIs.
- 02Triage.A small model reads every repo's file tree + README and picks the 20 files per repo that actually reveal how you code.
- 03Grade each repo. All repos run in parallel through a fast scoring model that reads the picked files and rates each one independently on Impact, Quality, and Depth — with evidence citations.
- 04Aggregate. A larger reasoning model combines the per-repo scores with server-computed stats (heatmap, commit cadence, language entropy, follower count) to produce the 6-dimension profile score + roasts.
- 05Correct.Deterministic server-side checks enforce anchor-scale floors (e.g. a profile with 2,000+ public commits can't score 30 Consistency) and recompute the final verdict.
~90 seconds per profile, ~$0.25 in compute. Total of ~240 files read across your top-12 repos. One rating per GitHub account per day.
▸ Data sources & caveats
- Heatmap & commit totals: GitHub GraphQL
contributionsCollection— covers the last 365 days, includes private repos when the user has opted in (default). - Language %: byte totals across the top 30 owned non-fork repos.
- Curve: a small upward nudge centered on raw score ≈ 70, capping at 100. Prevents specialists from being unfairly penalised for narrow breadth.
- Anchor corrections: when server-measured signals (e.g. privateWorkLikely, multiRepoVolume, follower count) mandate a minimum category score, the aggregation step enforces it. These are signal-conditional, not identity-based floors.