Backend & Security Projects

Explore my portfolio of projects, including web applications, APIs, and more. See what I've been working on.

  • AnonVeil: A system-wide Tor kill switch for Arch and Debian: redirects every outbound TCP connection and DNS query through Tor via nftables, and fails closed (drops all traffic) if Tor goes down. Includes a live TUI dashboard, a panic lockdown, and boot-persistence support.
  • mcp-guard: Static security scanner for MCP (Model Context Protocol) servers written in Python, TypeScript, and Go. Detects command injection, path traversal, hardcoded secrets, tool poisoning, and prompt-injection risks in tool definitions before an AI agent acts on them. Ships as a single binary with text/JSON/SARIF output and a GitHub Action.
  • WhereAreMyTokens: Self-hosted analytics for Claude Code subscriptions: see where your tokens go, what they would cost on the API, and what to automate to spend less. Ships a React dashboard, a FastAPI backend, OpenTelemetry and Prometheus metrics, and prompt-caching insights, all deployable with Docker.
  • SOC — Security Operations Center: Containerized Security Operations Center pipeline: simulates attack scenarios (SSH brute force, suspicious commands, anomalous logins), runs detection rules with MITRE ATT&CK enrichment via RAG, visualizes alerts in Kibana and a 3D force graph, and triggers automated IP blocking — fully deployable in under 5 minutes with Docker Compose.
  • Rans: CLI tool for authenticated file and directory encryption using AES-256-GCM (NIST SP 800-38D). Each file receives a unique cryptographic nonce. Ships as a single portable binary with no runtime dependencies, cross-platform for Linux, macOS, and Windows.
  • CredWeaver: CredWeaver is a fast, profile-driven credential wordlist generator built for authorized penetration testing, CTF competitions, and security research.
  • NewsDigest Bot: Stateless, serverless bot that fetches the latest news from NewsAPI across configured topics every 6 hours via cron jobs, builds a formatted digest, and fans it out to Telegram and Discord. Includes a portfolio dashboard with manual trigger capability and a status API.
  • Quantum Search: Quantum Search is a distributed search engine inspired by Google's internal architecture. It features asynchronous crawling, a custom-built inverted index, and TF-IDF ranking, orchestrated through a scalable microservices architecture with Docker and Kubernetes.
  • C2 Command & Control Platform: An educational Command & Control (C2) platform built to explore distributed architectures and real-time agent management. It includes a Laravel backend, Vue 3 SPA frontend, and a cross-platform Python agent with asynchronous communication and command execution.
  • GameOfNeighborhoods: 24-hour hackathon project: immersive web application that leverages AI and open APIs to match users with their ideal Los Angeles neighborhood based on personality and lifestyle — all wrapped in a unique medieval-inspired aesthetic.
  • Stegnonfiles: Stegnonfiles is a minimalist clone of AnonFiles. It allows anonymous file uploads and uses encryption to protect privacy.