$ ls -la ~/research_and_projects/ --show-details

๐Ÿ“ SECURITY RESEARCH & VULNERABILITY DISCLOSURES

๐Ÿ”ด

orchids.app-vulnerability-disclosure/

โ”œโ”€โ”€ timeline: Sept 2025 - Nov 2025

โ”œโ”€โ”€ impact: Saved YC startup $1M+

โ”œโ”€โ”€ type: Payment bypass vulnerabilities (2 critical)

โ”œโ”€โ”€ process: Discovered Sept 2025, contacted YC security team & CC/CERT after non-response, resolved Nov 2025

โ”œโ”€โ”€ tech: Web Security, Payment Systems Analysis

๐ŸŒ

nvidia.zip-awareness-campaign/

โ”œโ”€โ”€ timeline: 2024

โ”œโ”€โ”€ mission: Demonstrate .zip TLD phishing risks

โ”œโ”€โ”€ investment: Self-funded security awareness project

โ”œโ”€โ”€ impact: Educated thousands about URL spoofing

โ”œโ”€โ”€ tech: DNS, Web Security, Social Engineering

โ”œโ”€โ”€ externalLink: https://nvidia.zip

โ”œโ”€โ”€ highlightLink:

๐Ÿ“ CLOUD SECURITY TOOLS

๐Ÿ”

CryptoGuard-Suite/

โ”œโ”€โ”€ description: Encryption, Decryption & Hashing Tool

โ”œโ”€โ”€ tech: Python, Cryptography, Flask, Docker

๐Ÿ“œ

SSL-Certificate-Manager/

โ”œโ”€โ”€ description: Enterprise SSL/TLS certificate lifecycle management

โ”œโ”€โ”€ tech: Node.js, OpenSSL, Docker, MongoDB

โœ…

ValidateX-Security-Scanner/

โ”œโ”€โ”€ description: Email & Website Security Verification Tool

โ”œโ”€โ”€ tech: Python, DNS Analysis, SMTP Validation

๐Ÿ“ PRODUCTIVITY & DEVELOPMENT TOOLS

๐Ÿ—„๏ธ

DataForge/

โ”œโ”€โ”€ description: Convert your CSV files to database queries (unlimited)

โ”œโ”€โ”€ tech: Python, CSV Processing, SQL Generation

๐Ÿ—œ๏ธ

CompressX-File-Processor/

โ”œโ”€โ”€ description: Advanced File Compressor & Format Converter

โ”œโ”€โ”€ tech: Python, Multiple compression algorithms

๐ŸŒณ

GitViz-Repository-Explorer/

โ”œโ”€โ”€ description: Interactive GitHub repository branch visualization

โ”œโ”€โ”€ tech: D3.js, GitHub API, React, TypeScript

๐ŸŽจ

DiagramCraft-Architecture-Designer/

โ”œโ”€โ”€ description: Collaborative architectural diagram editor (Excalidraw clone)

โ”œโ”€โ”€ tech: React, Canvas API, WebRTC, Socket.io

๐Ÿ“

DocuEdit-Offline-Processor/

โ”œโ”€โ”€ description: Full-featured offline document editor (MS Word alternative)

โ”œโ”€โ”€ tech: React, IndexedDB, PWA, Service Workers

๐Ÿ“ SPECIALIZED SECURITY INTERFACES

โš›๏ธ

ChemSec-Periodic-Interface/

โ”œโ”€โ”€ description: Chemistry-themed security tools dashboard

โ”œโ”€โ”€ tech: React, D3.js, Security APIs

๐ŸŽฏ

PokeSec-Network-Discovery/

โ”œโ”€โ”€ description: Pokemon-themed network security scanner

โ”œโ”€โ”€ tech: Python, Nmap, Network Analysis

๐Ÿ“ CLOUD INFRASTRUCTURE PROJECTS

โ˜๏ธ

secure-scalable-web-app-gcp/

Building a Secure and Scalable Web Application on Google Cloud Platform

โ”œโ”€โ”€ description: Enterprise-grade web application leveraging GCP services with automated CI/CD pipeline, static asset optimization, and comprehensive security measures

โ”œโ”€โ”€ components: Compute Engine VMs, Cloud Build, Cloud Functions, Cloud Storage, CloudFlare CDN

โ”œโ”€โ”€ features: Automated GitHub deployments, Weekly Cloud Build automation, Static asset CDN delivery, DDoS protection, Firewall configuration

โ”œโ”€โ”€ security: Network segmentation, Access controls, Data encryption (at rest & in transit), WAF protection, Regular security audits, Vulnerability assessments

โ”œโ”€โ”€ tech: GCP, Compute Engine, Cloud Build, Cloud Functions, CloudFlare, HTML/CSS/JavaScript

๐Ÿ’ฌ

interactive-resume-chatbot/

Unveiling My Interactive Resume: A Chatbot Built with Google Cloud Platform

โ”œโ”€โ”€ description: AI-powered conversational interface for resume exploration built with Dialogflow NLU on GCP. Provides engaging, personalized way for employers to learn about experience and skills

โ”œโ”€โ”€ components: Dialogflow (NLU Agent), Cloud Project, Dialogflow Essential, Cloud Run for deployment

โ”œโ”€โ”€ features: Natural language understanding, Intent-based conversation flow, Real-time responses, Website integration, Customizable dialogue paths

โ”œโ”€โ”€ benefits: Engaging user experience, 24/7 accessibility for recruiters, Personalized interaction, Efficient candidate screening, Stand out from traditional resumes

โ”œโ”€โ”€ implementation: Dialogflow intent definition, Conversational flow design, Website chatbot integration, Automated background deployment

โ”œโ”€โ”€ tech: Dialogflow, GCP, NLU, Cloud Run, Web Integration, Conversational AI

๐Ÿฏ

honeypot-security-system/

Honey Pot - A Web Defense Mechanism

โ”œโ”€โ”€ description: Decoy security system deployed on GCP for detecting, analyzing, and logging cyber attacks. Acts as bait to gather threat intelligence and protect production systems

โ”œโ”€โ”€ preparation: Google Cloud Shell initialization, Billing enablement, Compute Engine API activation, Region/zone selection

โ”œโ”€โ”€ deployment: Firewall rule configuration, MHN Admin installation, Honeypot VM setup, Network isolation

โ”œโ”€โ”€ components: MHN Admin (management), Compute Engine VMs, Custom firewall rules, Attack monitoring system

โ”œโ”€โ”€ features: Attack detection & logging, Threat intelligence gathering, Network security monitoring, Automated alerting, Traffic analysis

โ”œโ”€โ”€ security: Isolated network segments, Controlled traffic routing, Attack pattern analysis, Legal compliance verification, Service exposure management

โ”œโ”€โ”€ tech: GCP, Compute Engine, MHN, Network Security, Firewall Rules, Security Monitoring

๐Ÿ“ DATA SCIENCE & ML PROJECTS

โšก

project-pokedex-data-analysis/

Project Pokรฉdex - Where Data Meets Pocket Monsters

โ”œโ”€โ”€ description: Innovative data science exploration applying advanced ML and visualization techniques to Pokรฉmon datasets using cutting-edge GCP technologies

โ”œโ”€โ”€ components: Vertex AI (ML training), Google Colab (development), Python, Matplotlib, Looker Studio (dashboards)

โ”œโ”€โ”€ methodology: OSINT data collection โ†’ Data cleaning & classification โ†’ Exploratory analysis โ†’ ML model training โ†’ Interactive visualization

โ”œโ”€โ”€ features: Predictive type classifications, Pattern recognition & trend analysis, Interactive dashboards, Advanced data visualizations, Auto ML training

โ”œโ”€โ”€ challenges: Handling diverse Pokรฉmon attributes, Multi-class type prediction, Creating interactive visualization techniques, Model optimization

โ”œโ”€โ”€ insights: Comprehensive understanding of Pokรฉmon characteristics, Data-driven type predictions, Visual exploration of complex datasets

โ”œโ”€โ”€ tech: Vertex AI, Auto ML, Google Colab, Python, Matplotlib, Looker Studio, Machine Learning, Data Visualization

๐Ÿ“ SERVERLESS & API PROJECTS

๐Ÿ“„

json-resume-api-serverless/

Cloud JSON Resume API - Serverless Architecture Challenge

โ”œโ”€โ”€ description: Event-driven serverless API for serving resume data in JSON format from Firestore NoSQL database with public access and auto-scaling

โ”œโ”€โ”€ components: Firestore (NoSQL database), Cloud Functions (2nd gen), Cloud Run (deployment), Python (source code)

โ”œโ”€โ”€ architecture: Users make API call โ†’ Cloud Function triggers โ†’ Retrieves data from Firestore โ†’ Returns JSON response via Cloud Run

โ”œโ”€โ”€ deployment steps: Create GCP project, Configure Firestore collection, Write Cloud Function source in Python, Set service account permissions, Configure allUser access, Deploy on Cloud Run

โ”œโ”€โ”€ features: Real-time data retrieval, Serverless auto-scaling, Public API access, Event-driven architecture, NoSQL data storage, Low latency responses

โ”œโ”€โ”€ tech: Firestore, Cloud Functions (2nd gen), Cloud Run, Python, NoSQL, Serverless Architecture, Event-Driven

๐Ÿ“ POST-QUANTUM CRYPTOGRAPHY

๐Ÿ”ฎ

QNSQY-Quantum-Encryption/

Quantum-Resistant Hybrid File Encryption

โ”œโ”€โ”€ description: Post-quantum file encryption using ML-KEM + X25519 hybrid cryptography for defense-in-depth against both current and future quantum threats

โ”œโ”€โ”€ features: Hybrid ML-KEM-768 + X25519, Network sandboxing (Linux), Memory protection with mlock, Cross-platform (Windows/macOS/Linux)

โ”œโ”€โ”€ security: NIST FIPS 203/204/205 compliant algorithms, Argon2id key derivation, AES-256-GCM/XChaCha20-Poly1305, BLAKE3 integrity

โ”œโ”€โ”€ algorithms: ML-KEM-512/768/1024, ML-DSA-44/65/87, SLH-DSA signatures

โ”œโ”€โ”€ tech: Rust, ML-KEM, ML-DSA, X25519, Argon2id, seccomp-bpf

๐Ÿ“ RANSOMWARE DEFENSE TOOLS

๐Ÿ‘๏ธ

RansomWatch-Detection/

Local-First Ransomware Detection System

โ”œโ”€โ”€ description: Real-time file system monitoring for ransomware activity with entropy analysis, pattern matching, and mass operation detection

โ”œโ”€โ”€ features: Shannon entropy detection, 95+ ransomware extension patterns, 40+ ransom note patterns, Mass file operation alerts, Process monitoring

โ”œโ”€โ”€ philosophy: Monitor-only (no blocking), 100% local (no telemetry), Lightweight background operation

โ”œโ”€โ”€ alerts: Desktop notifications, Webhook support (Slack/Discord), Email alerts, Real-time web dashboard

โ”œโ”€โ”€ tech: Rust, inotify, FSEvents, Shannon Entropy, Pattern Matching

๐Ÿ›ก๏ธ

Sentinel-Ransomware-Prevention/

Real-Time Ransomware Detection & Prevention for Linux

โ”œโ”€โ”€ description: Kernel-level ransomware protection using eBPF tracing and fanotify to detect and stop ransomware before file destruction

โ”œโ”€โ”€ features: Entropy transition detection, Header validation, Velocity tracking (100+ files/min), Canary file tripwires, Process freezing (SIGSTOP)

โ”œโ”€โ”€ technology: eBPF kernel tracing, fanotify write gating, inotify monitoring, AIDE integration

โ”œโ”€โ”€ detection: Low-to-high entropy transitions, Destroyed file magic bytes, Mass encryption patterns, Backup deletion commands

โ”œโ”€โ”€ tech: Rust, eBPF, fanotify, inotify, Linux Kernel Security

๐Ÿ“ ENVIRONMENTAL DATA PLATFORMS

๐ŸŒŠ

Hydrocarbon-Microplastic-Dashboard/

Environmental Pollution Tracking & Visualization Platform

โ”œโ”€โ”€ description: Comprehensive data dashboard for tracking hydrocarbon and microplastic pollution with real-time visualization and location-based alerts

โ”œโ”€โ”€ features: Interactive data visualizations, Location-based pollution alerts, Educational widgets, Advanced search capabilities, Newsletter integration

โ”œโ”€โ”€ components: Data visualization showcase, Planetary emergency tracker, Microplastics education, Comparison tables

โ”œโ”€โ”€ impact: Environmental awareness, Pollution data accessibility, Research support

โ”œโ”€โ”€ tech: Next.js, React, D3.js, TypeScript, Data Visualization

$ project-stats --summary

Total Projects: 20

Categories: Security Research (2), Cloud Security Tools (3), Development Tools (5), Specialized UI (2), Cloud Infrastructure (3), Data Science (1), Serverless (1), Post-Quantum Crypto (1), Ransomware Defense (2), Environmental Data (1)

Featured GCP Projects: 5 with architecture diagrams

Tech Stack: GCP, Vertex AI, Dialogflow, Cloud Functions, Firestore, Compute Engine, Cloud Run, Python, ML, Rust, eBPF, ML-KEM

High-Impact Disclosures: orchids.app ($1M+ saved)

All Projects Include: Project Links & Blog Documentation

$ cat ~/.research/recognition.txt

"Recently discovered and responsibly disclosed critical payment bypass

vulnerabilities in a Y Combinator-backed AI startup, potentially saving

them millions in losses. Despite initial non-response, I persisted

through CERT/CC protocols and Y Combinator security team escalation,

demonstrating that doing the right thing matters more than recognition."