PaperMod is a fast, clean, and responsive theme designed for creating minimal and feature-rich personal websites or blogs built with the Hugo static site generator.

• Modified version of Hugo-theme-Paper with many feature additions.
• Supports dark/light mode, multilingual sites, and SEO optimization out of the box.
• Built-in search, archive pages, and social icon support.
• Github Wiki for extensive documentation.
• Featured in many Youtube Videos.
• Used by over a hundred thousand websites worldwide, including personal blogs, portfolios, and documentation sites.
• Search "& PaperMod" on Google to see a wide variety of sites using this theme.

Python-based tool for executing commands on remote Windows machines using the WinRM (Windows Remote Management) protocol.

• Provides an interactive shell for offensive security assessments.
• Supports file uploads, downloads, and remote script execution.
• Lightweight alternative to the original Ruby-based Evil-WinRM.
• Available in official Kali Linux and Parrot OS repositories.

My personal website and blog (the website you are currently on).

• Developed using the JAMstack architecture (Javascript, APIs, Markup).
• Built with Hugo and powered by the PaperMod theme.
• Hosted on ▲ Vercel with Cloudflare DNS management.
• Privacy-first approach: No tracking or analytics scripts.
• Interactive comments powered by giscus.app via GitHub Discussions.

A modern, lightweight, web-based user interface for Frida, tailored for Android application penetration testing.

• Interact with devices, processes, and scripts directly from the browser.
• Built with FastAPI (Python) and Vanilla JS/HTML/CSS for speed.
• Simplifies dynamic analysis by providing a visual way to inject scripts and monitor results.

A PWA tool designed to view and search HTTP history exported from Burp Suite Community Edition.

• Solves the lack of disk-based project support in Burp Community Edition.
• Works completely offline once installed as a Progressive Web App.
• Features a clean, searchable interface for browsing large history files.

Patches an APK’s bundled libflutter.so files to disable Flutter’s TLS verification so HTTPS traffic can be intercepted during analysis.

• Applies binary patches across ABIs (arm64-v8a, armeabi-v7a, x86_64, etc.) and outputs a patched APK.

Utility to patch an APK’s network security configuration in-place to allow user/system certificates and cleartext, without a full resource rebuild.

• Detects binary AXML or plain-text XML and replaces the target entry with a permissive config.
• Works on Linux and Windows and avoids decompiling the whole APK.
• Useful when intercepting app traffic for analysis; re-signing required after modification.

Python proof-of-concept for CVE-2026-0073 demonstrating a logic bug in ADB’s TLS certificate verification that can allow unauthorized access.

• Generates a non-RSA client certificate, performs STLS/TLS handshake and authenticates via the vulnerable path, then opens a shell.

A collection of automated scripts to quickly spin up a Dockerized, open-source laboratory for Android security testing.

• Includes tools for both static and dynamic analysis.
• Pre-configured environment for various security assessment tools.
• Simplifies the setup process for new mobile pentesting environments.

A simple and minimalist Hugo theme inspired by the layout of GTFOBins.

• Optimized for speed and quick information retrieval.
• Clean layout focusing on readability and straightforward navigation.
• Ideal for technical documentation or cheat-sheet style sites.

A fast, searchable index for HackTheBox machines with categorization and tags.

• Filter machines by vulnerability type (e.g., SQLi, LFI, BOF).
• Sources data from community-contributed tags for better searchability.
• Built as a static site hosted on Cloudflare Pages.

Automated utility using GitHub Actions to retrieve official HTB write-up PDFs.

• Triggers automatically when a machine is retired on the HackTheBox platform.
• Stores and archives PDFs for offline study and reference.

A machine learning project aimed at estimating Body Mass Index (BMI) from facial features.

• Frontend: React-based web application for capturing images.
• Backend: FastAPI service for processing ML inference.
• Model: Custom-trained neural network for feature extraction and BMI prediction.

High-performance URL shortener built with Vercel Serverless Functions and MongoDB.

• Leverages Vercel’s edge network for low-latency redirection.
• Utilizes MongoDB Atlas free tier for efficient data storage.
• Capable of scaling to handle millions of shortened URLs.

A comprehensive open-source blogging platform built with Django and Python.

• Features RSS/Atom feeds, Sitemaps, and post view tracking.
• Includes a full-featured admin dashboard and support for Bootswatch themes.
• Uses Trix rich-text editor for a seamless writing experience.

Discontinued Telegram bot that provided Mumbai University question papers on demand.

• Used web scraping (BeautifulSoup) to fetch papers in real-time.
• Served over 600 students before its retirement.
• Automated the tedious process of searching for unofficial resources.

Enhanced fork of the django-trix library for integrating Basecamp’s Trix editor.

• Added custom widget support and better integration with modern Django versions.
• Simplified model field implementation for rich-text content.

Project to turn a Raspberry Pi into a high-quality Bluetooth audio receiver.

• Enables wireless streaming to older audio equipment.
• Configures BlueALSA and PulseAudio for low-latency streaming.

A specialized web application for generating official transcripts for university students.

• Tech Stack: PHP, MySQL, and Bootstrap.
• Automatically formats data into PDF layouts required by Mumbai University.
• Used by staff for rapid document generation.

Custom ROM modification project for Android devices based on Paranoid Android.

• Included performance optimizations and additional UI customizations.
• Focus on stability and maintaining the clean PA design language.