Projects

Things I've built

Hands-on security engineering work cryptography, application security and automated vulnerability detection. Source code lives on GitHub.

Oct 2024 – Dec 2024

Secure Chat Application

End-to-end encrypted chat application built in Python for secure real-time communication.

  • Implemented AES and RSA encryption to achieve message confidentiality, integrity and authentication.
  • Integrated user authentication and session management.
  • Added a logging mechanism for auditing and traceability.
PythonAES / RSAFlaskMySQL

Apr 2024 – May 2024

Custom Web Security Scanner

Python-based scanner that detects common web vulnerabilities and misconfigurations.

  • Detects SQL injection, cross-site scripting (XSS) and CSRF issues.
  • Scans HTTP headers and SSL/TLS configuration for misconfigurations.
  • Sends automated email alerts for detected vulnerabilities.
PythonNmapOWASP ZAPSMTP

Security Engineering

Controlled Execution Sandbox

Sandbox that safely executes untrusted Python code under strict security constraints.

  • AST-based validation blocks imports, exec/eval, file and system access.
  • Runs code in an isolated process with limited safe built-ins.
  • Timeout control terminates long-running or infinite loops.
PythonASTMultiprocessingSandboxing

Security Engineering

Tamper-Evident Logging System

Cryptographically chained logging system that makes any tampering detectable.

  • Links every log entry to the previous one with a SHA-256 hash chain.
  • Detects data modification, log deletion and log reordering.
  • Includes a verifier to prove log integrity end to end.
PythonSHA-256Hash ChainingJSON

In progress

sethuz-ai

A premium black-and-gold opportunity discovery and user-controlled AI application workflow app.

  • Discovers opportunities and guides users through AI-assisted application workflows.
  • User stays in control of every AI-driven step.
  • Currently being built with Manus.
AI WorkflowsOpportunity DiscoveryManus
In development