Building detection systems, network-analysis tools, security automation and open-source software.
Self-contained log analyzer that parses Apache logs and detects brute-force, SQL injection, XSS and path-traversal attempts against a real per-IP history, not a single-batch heuristic.
A Rust packet engine decoding Ethernet/IPv4/IPv6/ARP/TCP/UDP from raw pcap files, with flow tracking, TCP reassembly, and working port-scan, SYN-flood and ARP-spoof detection rules.
Five specialized local AI agents — orchestration, research, code generation, security auditing and memory — served through FastAPI, running entirely on local hardware via LM Studio or Ollama.
A deliberately small service that owns one job: recording who approved a containment action, when, and why — kept separate so the detection engine can never also authorize its own response. Fails closed if unreachable.
A modular TCP port scanner with concurrent scanning (ThreadPoolExecutor), banner grabbing, and both CLI and JSON output.
Packet sniffer and traffic analyzer sharing one capture core across a CLI, a GUI, and a dashboard visualizer.
This repository's listed contents don't currently match its stated description. Left out of the case-study list until verified — see note to Rohit below.
A self-contained log analyzer that runs entirely on one machine — no cloud account, no external database. Point it at a real Apache access log, or run the live traffic simulator, and it catches brute-force logins, SQL injection, XSS and path-traversal attempts in real time through a single shared detection path used by the CLI, the API, and the dashboard alike.
A Rust workspace built as a network packet engine from the wire formats up — no Wireshark code reused. Decoders were written directly against RFC 791/793/768, ARP, and the classic pcap file format, feeding a flow-tracking layer and a working detection engine.
Documented honestly as in-progress: live capture, threat-intel feed matching (Sigma/YARA), and a frontend are scoped but not yet implemented.
Source on GitHub →Five specialized local agents chained into one cognitive pipeline, served through FastAPI, running entirely against a local model via LM Studio or Ollama — no data leaves the machine.
Every project above is public, MIT- or Unlicense-licensed, and built from scratch — decoders, detectors, and orchestration logic written against source specs rather than copied from existing tools. Contributed to Hacktoberfest 2025 and continues shipping in the open.
Six years of engineering, lived rather than just studied — work, earn, learn, in parallel with the coursework. Every concept had a real-world counterpart; every lecture had a bill attached to it.
From operations to services to founding teams, resolving hard problems that open-source communities wrestle with — that's been the shape of the career. Not a straight line. A real one.
Outside of engineering: 700+ trees planted across Tamil Nadu and Pune, two years leading a 40-person youth volunteer team through Pune's COVID care response, and ongoing work on clean-water access in remote mountain regions.
"Life is volunteer — we didn't choose to arrive, and we won't choose to leave. So make it count while you're here."
Modern Cyber Warfare & Threat Intelligence Handbook — a technical analysis of Russia's cyber operations against Ukraine (2022–2023), built on CERT-UA reporting and mapped to MITRE ATT&CK. Read the handbook →
Let's talk — projects, open-source collaboration, or systems and security in general.