~/PROJECTS / BUILT SYSTEMS
Ideas that
made it to code.
Security research, exploit development, infrastructure, networks, and embedded systems—selected from my public GitHub work.
Each card opens its notes here, keeping the site focused while still showing the engineering behind the repository.
All repositories on GitHub ↗FACEIS
A role-aware facial investigation platform created during my August 2026 digital-forensics police internship.
FastAPIPostgreSQLRetinaFaceArcFaceFAISSDockerOpen project notes
FACEIS
A role-aware facial investigation platform created during my August 2026 digital-forensics police internship.
I designed and built FACEIS during a digital-forensics police internship from 1 to 31 August 2026.
The pipeline
Reference images and video frames pass through RetinaFace detection and quality checks. ArcFace produces normalized 512-dimensional embeddings, and FAISS provides the vector index used for similarity search.
The application
A FastAPI and PostgreSQL backend handles people, investigations, files, decisions, authentication, roles, and audit logs. A Vite front end provides the operator workflow, while Alembic and Docker make the data layer and deployment repeatable.
FastAPI · PostgreSQL · role-based access · audit trail
MOJO-JOJO CTF
An original binary-exploitation challenge suite spanning control-flow attacks and modern pwn techniques.
CPythonpwntoolsDockerGDBOpen project notes
MOJO-JOJO CTF
An original binary-exploitation challenge suite spanning control-flow attacks and modern pwn techniques.
MOJO-JOJO is where exploit ideas become complete CTF challenges.
What it explores
The collection covers stack pivoting, ret2libc, SROP, heap corruption, dynamic-linker abuse, and oracle-style primitives. Each problem is designed around an exploitation insight instead of a hidden trick.
Challenge engineering
The work includes vulnerable native targets, deployment containers, solvers, and the surrounding player experience. The published archive keeps each challenge page and writeup reachable.
Open the MOJO-JOJO cards ↗TaskPilot DevOps
A secured task platform carried from Spring Boot source code to Kubernetes and production-style observability.
Java 21Spring BootJWTKubernetesPrometheusGrafanaOpen project notes
TaskPilot DevOps
A secured task platform carried from Spring Boot source code to Kubernetes and production-style observability.
TaskPilot treats delivery and operations as part of the application.
The product
Users authenticate with JWT, organize projects, manage Kanban tasks, assign members, track due dates, and discuss work through comments. PostgreSQL holds the application state.
The platform
Docker packages the service, Kubernetes manifests deploy it, and GitHub Actions builds, tests, publishes the image, and prepares versioned manifests. Spring Boot Actuator feeds Prometheus, with a provisioned Grafana dashboard for the important signals.
GitHub Actions · Helm · Prometheus · Grafana
Mesh & 5G Simulations
Two OMNeT++ environments for studying a custom mesh network and a 5G NR scenario with Simu5G.
C++OMNeT++INETSimu5G5G NROpen project notes
Mesh & 5G Simulations
Two OMNeT++ environments for studying a custom mesh network and a 5G NR scenario with Simu5G.
Simulation makes the network visible: topology, routing, traffic, and behavior become things that can be inspected.
Two environments
The repository contains an independently developed mesh-network scenario and a 5G New Radio simulation based on Simu5G. INET supplies the protocol models used around those scenarios.
Why it matters
The project links telecommunications theory with executable experiments. It provides a controlled place to change topology or traffic and observe the resulting network behavior.
FST Pwn Bootcamp
A Dockerized progression of binary-exploitation challenges created for hands-on training.
CPythonROPFormat stringsDockerOpen project notes
FST Pwn Bootcamp
A Dockerized progression of binary-exploitation challenges created for hands-on training.
A teaching-focused pwn collection built to turn low-level concepts into practice.
The progression
The challenges move through buffer overflows, ret2shellcode, ROP, format strings, and increasingly constrained targets. Difficulty markers in the archive make that path clear.
Repeatable labs
Dockerized targets keep the environment consistent for bootcamp participants and make every task easier to reproduce after the event.
Open the FST cards ↗Smart Greenhouse IoT
An ESP32 control system that senses greenhouse conditions and automates irrigation, air, and light.
ESP32C++MQTTNode-REDWokwiOpen project notes
Smart Greenhouse IoT
An ESP32 control system that senses greenhouse conditions and automates irrigation, air, and light.
A complete sensing and control loop, from the physical signal to the operator dashboard.
Sensing and automation
The ESP32 samples temperature, humidity, light, CO₂, and rain. Threshold rules control irrigation, fans, lighting, and ventilation while still exposing manual control where it is useful.
Telemetry
MQTT carries readings and actuator state to a Node-RED dashboard with live gauges, charts, alerts, and status indicators. Wokwi provides a reproducible hardware simulation.
observe · decide · actuate
Raw Image Recovery
A C utility that recovers deleted JPEGs by carving a raw memory-card image block by block.
CFile I/OJPEG carvingForensicsOpen project notes
Raw Image Recovery
A C utility that recovers deleted JPEGs by carving a raw memory-card image block by block.
Deletion often removes a reference before it removes the bytes.
The recovery primitive
The program reads a raw card image in fixed-size blocks, detects JPEG signatures, and writes each recovered file until a new signature starts the next image.
Why it fits
It is a compact exercise in binary formats, low-level file I/O, and forensic reasoning—the same habit of looking beneath the interface that drives the pwn work.
No project signature found.
Try a stack such as Python, Kubernetes, C, or IoT.