Projects
Full-stack and security builds, plus the academic and CTF research that came before them. The home page shows a curated selection; everything is here.
CTF & Penetration Testing Labs
Active CTF competitor building offensive skills across enumeration, exploitation, and privilege escalation. Currently active on the Junior Penetration Testing path on TryHackMe.
- Active on Junior Penetration Testing path on TryHackMe
- Practising manual exploit identification and vulnerability chaining
- Developing recon, web app testing, and post-exploitation techniques
ML Attacks on Physical Unclonable Functions
MSc dissertation weaponising GANs against PUF-based hardware authentication. Synthesised challenge-response pairs to train ML attack models against hardware security mechanisms.
- Demonstrated measurable PUF vulnerability through GAN-synthesised datasets
- Evaluated attack success rates and proposed countermeasures
- Advanced hardware-level threat research across ML and cryptography
Honey Encryption: Brute-Force Resistant Security
Researched Honey Encryption returning fake plausible plaintext on incorrect decryption, blinding brute-force attacks. Proposed a developer API for real-world integration.
- Designed a developer API for web and cloud application integration
- Applied DTE encoding to passwords, PINs, and biometrics
- Mapped use cases across internet banking and cloud security
NTFS Digital Forensics: File Recovery on Windows 10
Forensic investigation into deleted file recovery using MFT analysis, slack space, disk imaging, and CLI tools. Applicable to cybercrime investigation and incident response.
- Analysed MFT entries, slack space, and disk imaging for artifact recovery
- Compared CLI tools and recovery software for forensic soundness
- Documented best practices for evidence preservation and breach analysis
Automated Network Intrusion Response System (AIRS)
Research into automated self-defence for enterprise networks — integrating IDS/IPS detection with an Intrusion Response System (IRS) that delivers pre-configured active and passive countermeasures to contain attackers and restore system health.
- Classified IRS response models — notification, manual, and automatic (expert, adaptive, associative) — and mapped active vs passive mitigations
- Evaluated agent-based IDS/IRS architectures: CSM, EMERALD, JiNao, and NetSTAT
- Assessed weaknesses (false positives, scalability, alert flooding) and future directions in real-time response and risk assessment
Claude Org Framework — AI Agent Orchestration
A production-grade multi-agent operating system built on Claude Code. 89 role-scoped agents across a full org chart — engineering, security, QA, DevOps, product — each with its own remit, escalation path and sign-off gates. Clone it and run your own AI-powered organisation.
- 89 role-scoped agents with enforced separation between building, reviewing and shipping
- Mandatory security and QA sign-off gates before anything reaches production
- Git hooks and a consistency checker that block policy violations mechanically, not by convention
Cybersec Toolkit
A client-side cybersecurity utilities toolkit — encoding/decoding, hashing, JWT/AES/RSA tools, a CyberChef-style recipe chainer, and OSINT lookups. Nothing ever leaves the browser except a few clearly-disclosed public API calls.
- Encoding, hashing, and JWT/AES/RSA tooling with a CyberChef-style recipe chainer
- OSINT lookup utilities alongside classic encode/decode and crypto tools
- Fully client-side — no data leaves the browser except disclosed public API calls
The Vault
A fast, fully client-side knowledge base for 248 cybersecurity notes — cloud, GRC, OSCP, and red-team — with an Obsidian-style reader: instant full-text search, a command palette, wiki-style cross-links, an interactive link graph, and backlinks. No backend, nothing leaves the browser.
- 248 interlinked notes across four tracks with full-text search and a ⌘K command palette
- Wiki-links, backlinks, an interactive link graph, and a scroll-spy table of contents
- Fully static and client-side — HTML sanitised with DOMPurify, all assets vendored, zero external calls
JobScope — UK Job Aggregator
UK job aggregator that filters listings by visa sponsorship status and security clearance requirements — built for candidates who need to know eligibility before they apply. Resume parsing powered by Claude AI.
- Filters roles by visa sponsorship and security clearance eligibility
- Claude AI resume parsing for automated candidate-to-role matching
- IDOR, SSRF, and prompt-injection defences built in from the ground up
Blueprint — Project Management Tool
A project management dashboard for tracking tasks, milestones, and team progress. Built as a single-page app with a clean kanban-style interface.
- Visual project and task tracking with status columns
- Milestone management with progress indicators
- Deployed via GitHub Actions to GitHub Pages
Finance Dashboard — Personal Finance Tracker
Comprehensive personal finance tracker for NRI/UK professionals. Tracks income, expenses, investments, debts, and goals across GBP and INR. Includes ROAI analytics, envelope budgeting, bill calendar, SMS transaction parsing, and OLED dark mode.
- Cross-currency portfolio tracking with real-time ROAI metrics
- SMS and CSV bank import with auto-categorisation
- Privacy mode, keyboard shortcuts, and OLED dark mode