Prisma OS (In Development)
A custom operating system built from scratch. Exploring bootloaders, kernel development, memory management, and low-level system architecture.
About
I'm an undergrad CS student who got pulled into systems and security early and never found a good reason to leave.
Started with C, then got curious about what's underneath it. Built things close to the metal — a custom HTTP server parsing raw TCP bytes, a honeypot in Rust catching real attackers, utilities that talk directly to Linux kernel APIs. Got into CTFs, started writing about them, then ended up building and hosting a 21-level wargame for 150+ people at my institute.
The security side took over from there — reverse engineering, binary exploitation, privilege escalation, network internals. GDB, Ghidra, Wireshark became second nature. Picked up Rust because I wanted memory safety without giving up control. Learned assembly because I wanted to see what the compiler was hiding.
Now I mostly live in the intersection of systems internals and offensive security — kernel mechanics, eBPF, namespaces, the stuff most people treat as a black box. Red team and blue team both pull at me equally.
I know where the bodies are buried. I probably put most of them there.
Skills
Programming
Cybersecurity
Tools
Other
Work / Projects
Axum Vuln Lab
A intentionally vulnerable web application built with Rust and the Axum framework to demonstrate common web vulnerabilities and secure coding practices.
LLM Prompt Injection
A research project and testbed for exploring Large Language Model (LLM) vulnerabilities, specifically focusing on prompt injection techniques and defenses.
Telnet Honeypot
Minimal Rust honeypot using a thread-per-connection model and an explicit state machine. Captures attacker credentials and simulates a believable shell — catches real attackers in the wild.
Runtime Decrypted Execution Pipeline
Low-level C implementation of runtime-only code execution using anonymous memory mappings, permission transitions (RW→RX), and memory wiping to resist static analysis.
HTTP Server in C
HTTP/1.0 server in C that treats TCP as a raw byte stream, enforces server-side trust boundaries, and avoids heap allocation in the request path for predictable memory behavior.
Keylogger in C
Linux kernel-level keylogger using /dev/input event files. Captures all keystrokes at the device layer, below X11/Wayland — works in terminals, GUIs, and TTYs alike.
Hexdump in C
From-scratch hexdump utility in C that reads raw input byte-by-byte and displays hexadecimal offsets, byte values, and a printable ASCII view — faithful to the classic hexdump tool.
Meta Data Remover
Privacy-focused web tool that removes EXIF metadata from images directly in your browser. No uploads, no tracking, no server — everything happens locally.
Undo Redo Visualization
Smooth Manim animation demonstrating the Undo-Redo stack mechanism. Color-coded stacks, smooth transitions, and a clean visual model of text edit history.
Chess (C++ OOP)
Full chess engine in C++ using polymorphic pieces, move validation, check/checkmate detection, and special moves. Console-based visualization with proper chess rules.
Writeups
CTF walkthroughs, OverTheWire solutions, and pentesting notes:
Bandit
Linux and SSH-based wargame — file permissions, privilege escalation, shell navigation
Natas
Web exploitation series — HTML source, HTTP, cookies, server-side scripting
Leviathan
Reverse engineering series — binaries, SUID permissions, ltrace / strace debugging
Linux Privilege Escalation
SUID binaries, sudo rights, cron jobs, kernel exploits and misconfigured services
Pentesting
Web app pentesting methodology — recon, application mapping, auth analysis, exploitation
flAWS - Cloud Pentesting
AWS cloud exploitation and security configurations — S3 bucket leaks, IAM policies, and global credentials
Cybersecurity Basics
Linux commands, Windows fundamentals, PowerShell, networking, packet analysis
Love at First Breach
TryHackMe Valentine's CTF — Cupid's matchmaker, TryHeartMe, ValenFind and more
All Writeups
Every published writeup — Bandit, Natas, and beyond, sorted by date and topic
Contact
Feel free to contact me for anything~
