work
production work, projects, contract pieces. the stack varies; the problem is usually the same.
A read-only AWS security scanner for startups. Connects through a CloudFormation IAM role, ranks every finding 0–100 by what's actually reachable instead of raw severity, and maps each to CIS, PCI, and GDPR. In closed beta at beruni.app.
A client-less network vulnerability scanner. Microservices, real-time asset inventory, AD integration. My senior project, the most useful thing I built as a student.
A custom scoring plugin for CTFd implementing parabolic decay scoring. Deployed at the Ignite Pakistan cybersecurity competition.
Designed and deployed a Shellshock CTF challenge for NasCon24. Intentionally vulnerable CGI backend, JavaScript-obfuscated client, Docker-isolated per-team instances with unique flags. 60+ teams competed. One solved it.
Backend on a multi-tenant SaaS: auth, service orchestration, deployment pipelines across distributed services.
Backend infra for a cloud signage platform serving 1000+ screens across WebOS, Android, and Windows. Built the CMS, the WebOS player, and per-screen licensing.
Module customization, REST integrations, and role-based access controls across four enterprise CRM deployments.
Product database and sales-tracking APIs at the core of an e-commerce analytics platform. Multi-threaded request handling cut p99 by ~30% at peak load.
Backend for managing lost-and-found items in institutional settings. Real-time notifications, user accounts, item search.
Automated scraper for movie data and subtitles. An early Python project, kept around for posterity.
Classic brick breaker game written in x86 Assembly. Direct hardware interaction, no runtime, no stdlib.