Projects

Pipelines and systems I have built, and systems I have broken — CI/CD and DevSecOps, application security, digital forensics, and the full-stack work underneath all of it

Selected work

PRAHARI

Statewide CCTV registry and video-analytics platform

Cut projected backhaul bandwidth 650x (160 Gbps to under 250 Mbps) and 30-day storage 8,600x (52 PB to 6 TB/month) for a statewide 80,000-camera surveillance rollout, by architecting a three-plane registry, detection, and correlation system for a state police hackathon that keeps video at the edge and streams only protobuf metadata — camera health, plates, tracks, alerts — centrally, deployed on Kubernetes via Helm and Terraform with a single profile switch between a laptop and a rented GPU.

FastAPINext.jsPostGISMapLibre GLgRPCYOLOPaddleOCRRedisHelmTerraform

btrfsparser

Forensic BTRFS filesystem parser

Recovers filesystem metadata and file contents from raw BTRFS disk images. Parses the superblock, walks the chunk tree to translate logical addresses to physical ones, traverses B-trees for inodes and directory entries, and reassembles files from inline, compressed, and regular extents — validating CRC32C checksums along the way. Ships a full technical walkthrough in the repository. Reading on-disk extent and B-tree structure directly is the same skill that makes overlay2 layer analysis and volume-level container incident response tractable.

PythonFilesystem ForensicsReverse Engineering

KK Society

Member portal for a 970-member society

Audited and enforced role-based access control and rate limiting across 90+ API endpoints, closing broken access control and hardening against denial of service. Built a service request workflow with state tracking, and integrated the RazorPay gateway for member collections.

Next.jsSpring BootPostgreSQLTypeScriptDockerAuth0

Incident Response and Malware Analysis

Memory forensics and IOC extraction

Identified indicators of compromise — hardcoded C2 URLs, malicious hashes — through static analysis with strings, exiftool, and Detect It Easy. Used Volatility 3 for memory forensics to surface malicious processes and network artefacts, and automated hash extraction and VirusTotal lookups in Python.

Volatility 3WiresharkKali LinuxPython

Earlier work

This site

Statically exported Next.js portfolio

The site you are reading, built as a static export with no server runtime. Notable less for the pages than for the discipline underneath: a live readout that was re-rendering React 40 times a second was moved to an out-of-band ref write, with a regression test pinning the absence of re-renders; the build-time type check is proven to gate the build by injecting a real type error; dependency overrides were verified inert by diffing the emitted CSS byte-for-byte; and a post-build integrity gate checks robots directives, canonicals, share metadata, local images, internal links and anchor fragments across every exported page.

Next.jsReactTypeScriptVitestGitHub ActionsCI/CD