Work.
Case studies and the rest of the shelf — security tooling, spaced-repetition software, and product builds.
CH.1 FEATURED BUILDS
// Systems worth the extra detailA burn-after-reading pastebin where the server never sees the plaintext — it can't decrypt what it stores even if it wanted to.
- Browser generates a random AES-256-GCM key and encrypts the text locally, via the Web Crypto API
- Only ciphertext and an IV are sent to the server — the key itself never leaves the browser
- The share link carries the key after a
#— URL fragments are never sent in HTTP requests, so it never touches a server log - Opening the link decrypts locally, then the server deletes the paste immediately — a second visit returns "not found"
The hard part wasn't the encryption — it was designing the server to be provably unable to help, not just promising not to.
An offline attack-surface management tool built for air-gapped and confidential pentest engagements — network topology never leaves the machine.
- Ingests an Nmap scan (or runs one directly) against the target subnet
- A deterministic engine flags end-of-life software, default credentials, and known-exploited vulnerabilities against locally cached feeds
- A local Ollama model synthesizes the findings into attack narratives, using map-reduce chunking so enterprise-sized scans don't overrun a small local context window
- Everything renders into a self-contained, interactive HTML network graph — no cloud call at any step
The constraint that shaped everything: a local LLM's context window is small, but a real engagement's attack surface isn't — the map-reduce step exists because the network doesn't get smaller to fit the model.
Anki's spaced-repetition algorithm, wrapped in a calendar you actually want to open — because a scheduler only works if you show up to it.
- Log a study session — topic, subject, and a confidence rating from Blank to Perfect
- SM-2 reschedules the next review from that rating and a per-topic ease-factor, not a fixed interval
- The session lands on a month-view calendar, feeds a per-topic forgetting-curve chart, and links into a knowledge graph of related sessions
- Missed reviews stay visibly overdue instead of vanishing; recurring topics auto-generate catch-up instances so nothing quietly falls off the schedule
Anki already has the SM-2 math — that part's a solved problem. The actual work was building a schedule someone wants to open, since a spaced-repetition system is only as good as whether you show up to it.
A SaaS platform I co-founded and helped build to simplify the college application process for students navigating admissions.
CH.2 SECURITY & PRIVACY
// Encryption, forensics, and offensive toolingSecure, peer-to-peer file transfer in the browser using WebRTC — no uploads, no size limits, no accounts.
Zero-dependency, automated Linux forensics triage script. Safely collects system logs and execution evidence into an AI-ready report.
Parallelised OSINT scraper and media downloader with regex filtering. Built for research and archiving — fast, scriptable.
Terminal UI for scanning ports, identifying what's running, and reserving free ones. Built with Textual for a proper interactive experience.
CH.3 PRODUCT & TOOLING
// Practical software people actually useKnow before you prompt. A blazingly fast CLI tool that calculates codebase token costs and detects bloat to optimize AI prompts.
A lightweight, open-source PDF translator with a user-friendly GUI. Seamless translation into multiple global languages.
Batch rename photos and videos using real metadata (EXIF). Sort by file size, name, or actual date taken. Simple GUI.