Projects

Final project for Group 13 at the University of Zurich's Deep Dive into Blockchain summer school. Closes the trust gap that keeps ocean cleanup underfunded: a marketplace where verified collectors are paid directly in OCT tokens for proven waste retrieval. Tamper-resistant payout model verified independently before release and weighted by material value and retrieval difficulty, plus a self-sustaining funding loop routing recycler purchases and donor contributions into a liquidity pool.

Blockchain · Smart Contracts · Token Design +1 more

Multi-source founder data aggregation engine (FastAPI, aiohttp, asyncio) normalizing LinkedIn, GitHub, Product Hunt and DEV.to profiles into structured JSON. Identity resolution via multi-engine search cascade + GitHub API verification. LightGBM classifier predicting startup acquisition/IPO success — ROC-AUC 0.84 on 196K companies.

FastAPI · asyncio · LightGBM +2 more

Privacy-first mobile + backend system that scans documents, images, audio and calendars on-device and indexes them with a local LLM (Qwen2.5-3B via Ollama) — no data ever leaves the network. Multi-modal ingestion (PyMuPDF, BLIP, Whisper), self-verifying RAG pipeline with ChromaDB, React Native/Expo app. Built for AIMinds Hackathon (5th place).

Ollama · ChromaDB · Whisper +4 more

Research project accepted at IEEE WETICE 2026 (Paris). Aggregates Dark Web intelligence and maps threat actors, techniques and indicators to the MITRE ATT&CK framework to proactively enrich threat knowledge bases.

AI/ML · MITRE ATT&CK · Dark Web Intelligence +1 more

Comprehensive VOC built during my graduation internship at ITC-Consulting: DNS traffic monitoring for anomaly & exfiltration detection, Python-based CVE scanners for web applications, automated CVE aggregation, alerting and monthly reporting.

Python · DNS Monitoring · CVE APIs +2 more

Claude Code skill for AI-assisted bug bounty hunting — recon, IDOR, XSS, SSRF, OAuth, GraphQL and LLM prompt-injection workflows, with report generation built in.

Python · Claude Code · Bug Bounty +1 more

Deliberately vulnerable Flask web application (SQLite3) implementing the OWASP Top 10 for educational purposes, with SSDLC principles applied to identify, mitigate and fix each flaw.

Flask · SQLite3 · OWASP Top 10 +1 more

Web, Forensics and MISC challenges for multiple national CTF events (Cr4ck0ut, Securinets Guided/Mini/Quals/Finals CTFs), including advanced Python Jail and forensic scenarios. CTFd infrastructure deployment and maintenance.

Python · CTFd · Pyjails +2 more

Customized plugin for Sysreptor using Microsoft Steampipe, with specialized report templates to enhance cybersecurity documentation and analysis workflows.

Microsoft Steampipe · Plugin Development · Report Templates

This very website! A portfolio and blog built with Next.js for CTF writeups — started life as a terminal theme, now a red-team HUD with a particle hero, glitch effects, smooth page transitions and a hidden shell (press ` to open it).

Next.js · React · TypeScript +2 more