Cybersecurity grad student. Applied ML research that escaped the lab. Building tools that get deployed — not just demo'd.
Six tools. One workflow. Built from scratch.
%%{init:{"flowchart":{"wrappingWidth":250,"nodeSpacing":40,"rankSpacing":50}}}%%
graph TD
A["🔍 OSINT-Leak-Radar"] --> C["🔬 forensic-timeline-builder"]
B["📡 wifi-security-auditor"] --> C
C --> D["⚡ soar-engine"]
D --> E["🩹 Auto-Patch-AI"]
D -.->|always on| F["📊 cve-watch"]
style A fill:#0d1117,stroke:#00ff41,color:#00ff41
style B fill:#0d1117,stroke:#00ff41,color:#00ff41
style C fill:#0d1117,stroke:#58a6ff,color:#58a6ff
style D fill:#0d1117,stroke:#f85149,color:#f85149
style E fill:#0d1117,stroke:#3fb950,color:#3fb950
style F fill:#0d1117,stroke:#d29922,color:#d29922
| Stage | Tool | What it does |
|---|---|---|
| 🔍 Recon | OSINT-Leak-Radar | Queries Wayback Machine CDX for .env files, SQL dumps, and private keys crawled years ago |
| 📡 Audit | wifi-security-auditor | WPA/WPA2 audit — OUI vendor lookup, WPS detection, PMKID capture without deauthentication |
| 🔬 Investigate | forensic-timeline-builder | SSH log collection → unified timeline → auto-detection of brute force and privilege escalation |
| ⚡ Respond | soar-engine | FastAPI webhook → Redis queue → Celery workers. Async playbooks: VirusTotal enrichment + firewall block + Slack |
| 🩹 Patch | Auto-Patch-AI | Trivy scans container → LLM (Groq free / OpenAI) writes patched Dockerfile. Free to run. |
| 📊 Monitor | cve-watch | NVD + EPSS enrichment. Ranks by cvss × exploit_probability — not just severity theatre |
- OpenAI Parameter Golf — 7 PRs to OpenAI’s 16 MB language-model competition (3,600+ participants). Co-credited on the merged baseline (PR #1493) for hyperparameter contributions adopted in 60+ subsequent submissions. Shipped Partial SpinQuant (selective Hadamard rotation by layer range) and End-to-End TTT (matched the published wishlist item). Final score 1.06614 BPB. All three tiers of the OpenAI/RunPod compute grant awarded.
- Behavioural Biometrics — Keystroke Anomaly Detection — Multi-model continuous-authentication on the CMU keystroke dynamics benchmark. Detects session takeover via typing-rhythm deviation. Aligned with NIST SP 800-207 Zero Trust. MSc CST4565 @ MDX Dubai.
- Nvidia-Challenge — gRPC GPU telemetry orchestrator. Distributed monitoring with auto-healing actions (node drain, alert escalation) on real-time GPU metrics.
- malware-deobfuscator — LLM-powered malware deobfuscation with IOC extraction and MITRE ATT&CK mapping.
- Morphe-Automated-Build-Scripts — GitHub Actions pipeline that builds and releases 37 patched APKs every two days. Used by real users.
