__                      _
      / _ ________   ________  _\ 
     / / /  ___  /| /  _____/   /\
    / / /  /  / / //  /_____/  / /
   / / /  /  / / / \____  \   / /
  / / /  /_ / / / _____/  /\ / /
 / / /_______/ /  \______/ // /
 \/_ |_______|/   \_______// /
 \__                      __/
      
        

JavaScript, p5.js, CanvasGUI

coming soon. :)

Python, PyGame

A remake of Snake I made as one of my early projects.

source code

Expo, React Native, Node, Next, MongoDB, SQLite, Drizzle ORM

An educational Android app for the Aarti Home nonprofit group based out of India, intended to provide young women with resources regarding healthy relationships and signs of abuse.

The app features a resources wiki, short quizzes, multiple languages, and an AI chatbot to direct users to the proper sources for their specific questions. We also built out an Admin Dashboard in a separate website to allow the client to add or remove content as they please.

I helped build the project from the ground up, mostly working on the UI skeleton, profile page, and user statistics. It was nearing deployment after a few semesters of development when I graduated.

source code

Next, Tailwind, PostgreSQL, Azure, Vercel AI SDK, Mastra

An internal RAG chatbot designed to aid MuleSoft IT support with access to a proprietary knowledge base. This was a solo internship project with iterative guidance provided to me regarding features, use cases, and relevant libraries, however all of the implementation and UI design was my work. One of the more significant features was its ability to not only cite its sources including documents and videos, but provide links to navigate to the source media, including exact timestamps in SharePoint videos.

Expo, React Native, Node, MongoDB

An iOS app for gameified coding interview prep. I joined midway and mostly worked on adding backend API endpoints. The project later diverged into a startup and has since become something else.

Python, Java, C++, Bash, Fernet, nginx

NOTE: This project is for research and educational purposes only, and should not be used outside of a lab environment.

An end-to-end kill chain weaponization of the Log4Shell vulnerability on a 1.17 Minecraft server showcasing how an attacker can easily execute remote code via a single chat message. Part of a group capstone project, I was responsible for finding the vulnerability and POC exploit, integrating independent pieces into the full stack, and implementing the crypto. The kill-chain is as follows:

Minecraft chat input → Log4j 2.14.1 JNDI lookup → marshalsec LDAP server → Python HTTP server → Beachhead.class fetched → RCE on server → privilege escalation → Persistent.elf binary fetched → implant added to systemd service → C2 server connection → data exfiltration

We used the marshalsec POC server to establish basic RCE, then built out the functionality around that. This includes the usage of a privilege escalation CVE in Sudo, a two-stage loader that fetches and installs a binary on the system persistent across restarts, a C2 server allowing arbitrary command execution on the target, encrypted data theft, obfuscated code techniques to deter reverse engineering, obfuscated network traffic via a proxy server, and a single-trigger bash script to launch the infrastructure.

Much of our code was written by AI due to a lack of experience in this field, especially with such a rigorous project under tight deadlines. This goes to show how LLMs can empower relatively inexperienced engineers to launch incredibly dangerous cyber attacks.

A more in-depth specification is available in the repository linked below.

source code

C++, PlatformIO, ESP32, VS1053 audio codec, Adafruit_GFX, FastLED

Rhythm Ring is a portable 1-4 player co-op rhythm game that fuses gameplay elements from Simon Says, Guitar Hero, and the Cyclone arcade game. It features a ring of lights which light up with 4 colors, each corresponding to a specific input button. Players must hit their color when indicated to match the rhythm of the song.

This was a final group project in which I wrote the embedded menu software, did major refactoring, and assisting with the final hardware assembly. We wrote all of the embedded code, drafted the hardware spec, and fully assembled all of the components, including the plastic shell which was 3D-printed.

Our prototype had 3 preloaded songs with the ability to add more via Clone Hero .chart files, volume and brightness settings, uses both cores of the ESP32 to separate the music timing from input and graphics logic, and uses USB-C for power.

source code demo

Next, Express, Docker, Prisma ORM, PostgreSQL, Clerk

A social web forum where developers and testers can collaborate on open-source bug bounties and software testing. The idea is that developers would post a link to a project of theirs, then testers would subsequently look for bugs and vulnerabilities for which they'd be rewarded with community rep. The developers gain more robust software while the testers improve their QA, ethical hacking, and unit testing skills.

We built out a number of features including an account system with SSO integration via Clerk, project posts containing bug tickets (with severity and status) and nested discussion threads, a report system, an XP-based ranking system, and a main project browsing feed.

This was a group final project in which I was responsible for setting up our dockerized Postgres instance, designing our database schema, and writing the API routes and controllers using Prisma in Express.

Flask, HTML, CSS, MongoDB Atlas, Auth0

A website for UMass students to rate and review the UMass dining halls. Users can leave a comment and/or rating out of 5 for each dining hall's daily menu. UMass' Dining is a staple of its student life due to its #1 national ranking. My friends and I would have daily debates of which dining hall choose, so we wanted a way to not only see which was the best for the day, but bring the social culture of UMass food to a more accessible platform.

This was a 3-person project and my portion was integrating the Auth0 account system.

source code hackathon entry

Python, Selenium

A command-line utility to submit homework assignments to Gradescope. This is perhaps still the most useful project I've ever worked on considering I used it multiple times a week for several years in school. Every one of our computer science classes used Gradescope for autograded projects, and having to constantly leave your development environment to go drag and drop your project folder into a web browser is disruptive and annoying.

Gradescope Submit uses Selenium WebDriver to web crawl Gradescope in the background and automatically submit your file. This was a 3-person project and my portion was working with pyInstaller to create a single binary located on the system PATH.

source code