I am a Cybersecurity Engineer and Security Researcher specializing in Application Security (AppSec), Threat Intelligence, and Security Automation. With deep foundations in both offensive security (penetration testing, exploit behavior, attack surface mapping) and defensive software engineering, I design and build resilient open-source tools and enterprise-grade web applications.
- 🔐 Application Security: Vulnerability assessment, OWASP Top 10 mitigation, secure code auditing, and automated AST/DAST scanning.
- 🎯 Threat Detection: Anti-phishing classifiers, real-time URL inspection heuristics, browser security extensions, and malware intelligence querying.
- ⚙️ Systems & Architecture: Multi-threaded network programming in C (POSIX sockets), compiler construction (Lex/Yacc), and full-stack development with Python, TypeScript, and modern frameworks.
- 🌐 Active Research & Writeups: Practical security breakdowns, project demos, and research notes published on akhilbinu.in.
|
• Kali Linux |
• Python 3 |
• React / Vite |
• Linux / Ubuntu |
|
Tampered Invoice & Digital Document Forensics Platform An enterprise-grade document forensics platform designed to detect invoice spoofing, digital document tampering, wire detail redirection, and retroactive metadata alterations.
Stack: |
🛡️ SecretShieldInstant Git Secret & API Key Leak Auditor (Shift-Left DevSecOps) High-velocity scanner detecting exposed API keys, private credentials, and high-entropy secrets across repositories and commits before public exploitation.
Stack: |
|
Production Personal Wealth & Expense Management Platform A full-stack financial tracker engineered for multi-account wealth tracking, automated financial intelligence, and enterprise-grade authentication.
Stack: |
Intelligent Threat Detection & Anti-Phishing Protection Suite An automated security suite engineered to analyze malicious URLs, inspect deceptive domains, and protect end-users from sophisticated social engineering vectors.
Stack: |
|
Enterprise Web Vulnerability Scanner & Footprinting Tool Asynchronous security auditing engine evaluating target URL postures, missing defensive headers, open attack vectors, and automated PDF compliance reports.
Stack: |
Interactive Social Engineering Simulation Laboratory An educational security awareness training platform walking trainees through real-world attack vectors in a secure, browser-isolated sandbox.
Stack: |
|
High-Velocity OSINT Reconnaissance Utility Reconnaissance tool designed for penetration testers and bug bounty researchers to enumerate active subdomains and map organization attack surfaces.
Stack: |
Zero-Knowledge Mathematical Entropy Evaluator A client-side authentication defense dashboard measuring information-theoretic Shannon entropy, brute-force resistance, and dictionary vulnerability.
Stack: |
Beyond high-level web applications, I maintain reference implementations for low-level systems programming, network architectures, and compiler design:
- ⚙️
KTU CSL331: Compiler Design Suite— Complete 13-program compiler implementation tracing Lexical Analysis, Flex/Bison Yacc Parsers, Automaton subset construction (NFA$\rightarrow$ DFA), Three-Address Code generation, and loop unrolling optimization. - 🌐
KTU CSL332: Network Architecture & Sockets— POSIX C socket programming suite implementing TCP/UDP models, custom FTP/SMTP protocol engines, Sliding Window flow control (Stop-and-Wait, Go-Back-N, Selective Repeat), and Leaky Bucket traffic shaping. - 🧭
The Interactive Nmap Field Guide— Interactive web application comparing TCP SYN, Connect, UDP, and stealth scans with dynamic Chart.js metric visualizations.
|
|
Interested in security research collaborations, open-source tooling, or application security consultations? Let's connect.
