01
caddy-detection-rules
Detection engineering · Wazuh XDR/SIEM
Production-ready Wazuh XDR/SIEM ruleset and decoder set for the Caddy web server, parsing structured JSON access logs to surface web-layer threats invisible to default Wazuh installs, filling a gap where no official Caddy integration existed. Built 29 independent, MITRE ATT&CK-mapped detection rules across Suricata, Snort, and Zeek covering path traversal, SQLi, XSS, LFI/RFI, SSRF, Log4Shell JNDI injection, credential exposure, and web recon, plus frequency-correlated behavioral rules for brute force and directory enumeration. Validated via a Docker-based wazuh-logtest pipeline, achieving a 26/26 pass rate with zero false negatives.
Wazuh 4.xSuricataSnortZeekDocker
02
Serverless Cloud Threat Detection and Alerting Framework
AWS · Detection engineering
Serverless security monitoring pipeline on AWS using CloudTrail, CloudWatch metric filters, Lambda (Python 3.12), and SNS fan-out, detecting and alerting on audit trail tampering, unauthorized API calls, failed console logins, and security group modifications. Engineered a Lambda alert processor with dual invocation-mode support, ALARM-state noise filtering, severity classification, and formatted Slack payloads. Validated end-to-end across all four alarms via live simulation.
AWS LambdaCloudTrailCloudWatchSNSPythonSlack API
03
snipe
AI-augmented static analysis
Real-time AI-augmented static analysis engine combining Tree-sitter AST parsing with LLM-powered secure code review to catch cross-file type mismatches, out-of-bounds violations, insecure patterns (CWE-mapped), and function signature drift on unsaved code, ahead of commit-time tools like SonarQube, Snyk, and CodeRabbit. VSCode extension streams unsaved buffers to a FastAPI backend at sub-100ms latency; a repo-wide dependency knowledge graph across Python, C/C++, and JavaScript performs real-time blast-radius analysis for bug propagation before a single line is committed.
CTypeScriptPythonTree-sitterFastAPIVSCode APIClaude API
04
i4cu: Deepfake Detection
Multi-modal forensics · Cloudflare Workers
Serverless, full-spectrum forensic tool built on Cloudflare Workers with Durable Objects for scalable session management. Visual forensics via CLIP-ViT semantic anomaly detection and Face X-ray for blending-boundary exposure; audio security via AASIST3 and WavLM; metadata/context analysis via Llama 3.3 and LLaVA for EXIF, watermarks, and OCR. Validated across 300+ media files: 75–80% accuracy, 75% precision, 83% recall.
TypeScriptPythonCLIP-ViTLlama 3.3
05
AutoPauseMiddleware
May 2025 · Systems / reverse engineering
Lightweight C# tool that detects when Cheat Engine (or a similar tool) is focused and auto-pauses the target game, with 3-tier pause logic (ESC simulation, custom key simulation, full OS-level process suspension via NtSuspendProcess) using GetForegroundWindow, PostMessage, and P/Invoke with ntdll.dll. Solves memory-editing on games without native pause support, aiding safe debugging and reverse engineering.
C#WinFormsP/Invoke
06
Indo-Dutch Cyber Security School 2024 Challenge
Oct – Nov 2024 · Incident response
Won 1st place in a simulated incident response challenge covering a compromised data center/cloud environment. Identified governance and policy lapses and proposed audits and stronger access controls; applied MITRE ATT&CK and NIST 800-61 to propose MFA, privilege management, and segmentation; built a CERT-IN/GDPR-aligned reporting strategy and a NIST 800-61 lifecycle plan for detection, containment, and recovery.
MITRE ATT&CKNIST 800-61GDPR / CERT-IN
07
NetStar
Sept 2024 · Chrome extension
Chrome extension that analyzes network performance and CDN endpoints, integrating M-Lab speed test with historical data views.
JavaScriptHTMLCSS
08
GETDNS
Sept 2024 · Chrome extension
Chrome extension to query DNS records (A, NS, CNAME, SOA, MX, TXT, AAAA, SRV) for any URL.
JavaScriptHTMLCSS
09
Real-Time System Algorithm Scheduler
Sept 2024 · Systems
C program to evaluate schedulability using RM, DM, and EDF with utilization bounds, RTA, and PDA analyses.
C
10
Adaptive & Fair Resource Allocation Algorithm for Scalable Online Advertising
Aug 2024 · Algorithms
Implemented a budget management system with the Balance Algorithm, tested across multiple allocation scenarios.
Python
11
Cyber Threat Intelligence
Aug 2024 · eBook
An introductory book on CTI, risk analysis, tools, and frameworks.
12
keylogger
Jul 2024 · Security tooling
Python keylogger built for controlled-environment security assessment.
Python
13
Malware Development & Analysis
Mar – Aug 2024 · eBook
Introductory book on malware internals, development, and analysis.
14
Hostel Management and Complaint Registration
Sept – Nov 2023 · Full-stack
Gathered requirements and created SRS/design docs; implemented RBAC; managed accounts, rooms, and complaints; ran comprehensive testing.
HTMLCSSJSFigmaUMLReactJSMongoDB
15
Mario Kart
Jan 2023 · Game
Endless runner built in pure JS, approved and featured on GitHub, and awarded a ₹10,000 Sprig console (Raspberry Pi Pico based) by Hack Club.
JavaScript
16
FyreFli
Dec 2022 – Feb 2023 · Security tooling
Advanced Python-based obfuscation tool supporting encoding, encryption, and hashing (UTF-8/16, SHA3-256, MD5). 2nd place in Open Innovation at LNMHacks 5.0 (prize pool $1500).
PythonHTMLCSSJS
17
CCAF
Aug – Oct 2022 · OSINT research
Amateur research project aggregating OSINT resources and tools; explored novel methods for information retrieval and footprinting.