Everything I've built
11 projects — security tooling, shipped products and data pipelines. Every one links to its source or its live deployment. Nothing here is a tutorial follow-along.
RedBlueSkills
Offense you can't detect doesn't ship.
An open-source library of agent-native security skills. Every skill is an executable SKILL.md package that an AI agent — or a human — can load to actually perform security work: recon, exploitation for authorized assessments, detection engineering, hardening, threat hunting and incident response. 128 skills across seven application surfaces — web app, API, mobile, network, cloud-native, CI/CD and LLM/AI — every one of them paired red ↔ blue. Built to run inside CI, SOCs and pentest workflows, not just be read.
ForkLeaf
Notes that outlive the app that made them.
A full Markdown workspace whose database is a GitHub repository you already own. Wikilinks and backlinks, offline full-text search, a visual Mermaid diagram studio, PDF reading with sentence-level citations, branches and pull requests, publishing to GitHub Pages and a built-in MCP server so Claude can read and write your notes as ordinary commits. Nothing is stored on ForkLeaf's servers — there is no database to be locked out of.
Network Tracking — Wireshark → Google Maps
Traffic-analysis pipeline that turns raw Wireshark captures into geographic intelligence. Parses PCAP with dpkt, geolocates every source IP against the GeoLiteCity database, and emits both a KML layer for Google My Maps and an interactive HTML dashboard reporting packets, flows, unique IPs, countries and processing time — so suspicious traffic is visible instead of buried in a capture.
pwprofiler — Targeted Password Profiler
Wordlist generator for authorized password audits. Turns OSINT about a target — names, dates, companies, keywords — into ranked candidate lists or a compact base list plus a generated hashcat .rule file. Policy-aware filtering emits only passwords the target policy could accept, and hard per-stage budgets stop a naive run from exploding into terabytes. Ships as a single static Go binary with a CLI, an interactive console and a local-only browser UI.
VectorShield — AI Security Gateway
A gateway that sits between an app and its LLM, screening every prompt on the way in and every response on the way out. Targets the OWASP LLM Top 10 risks a proxy can actually reach: prompt injection, model denial of service, and outbound PII and secret leakage. Multi-tenant policy engine with a hashed-by-default audit log.
KrnlSentry — eBPF Threat Detection for Linux
Real-time syscall monitoring for Linux. eBPF programs on syscall tracepoints stream events to user space, where rules flag privilege escalation, credential theft, process injection and reverse shells — each alert tagged with its MITRE ATT&CK technique. libbpf + CO-RE, so it ships as one static binary that needs nothing installed on the target.
Kelt — Expense & Debt Management Platform
Offline-first personal finance platform for iOS, Android and web. Features OCR receipt scanning, native multi-currency, loan amortization, credit-card utilisation tracking, and peer-to-peer IOUs. Includes shared household workspaces with isolated personal ledgers, and AI-powered insights.
InnerStack
Offline-first habit and routine tracker built as an installable PWA. Supports daily / weekly / custom-day habits, habit chains where completing one unlocks the next, mood and energy logging, and GitHub-style contribution analytics. Data is persisted locally — privacy by default, no account required.
WeatherDash
High-density meteorological dashboard with real-time conditions, a 24-hour outlook, a 5-day predictive grid and integrated air-quality tracking (PM2.5, NO₂, ozone) with colour-coded AQI tiles. The entire theme re-skins itself based on the current weather condition ID.
PlanWitch — AI Travel Agent
AI-powered travel assistant that turns a destination, budget and travel style into a complete day-by-day itinerary. Handles personalised recommendations, real-time guidance and plan regeneration through an LLM-backed generation pipeline.
Sadhana APPSC
Exam-prep platform for APPSC aspirants, shipped to a live domain with structured study resources and guided preparation tracks.