Portable hardware-software security device that intercepts executable file transfers between USB storage devices and Windows hosts. Runs a Python file watcher on a Raspberry Pi Zero WH performing static PE structure analysis and MD5 hash matching against known malware signatures, quarantining flagged .exe files before they reach the host system.

Python-based proof-of-concept exploit for CVE-2024-9326, a high-severity SQL injection vulnerability in PHPGurukul Online Shopping Portal v2.0. Automates authentication bypass via classic comment-sequence payload injection against the admin login endpoint, with configurable target URL, port, username payload, and password through a CLI interface, enabling security professionals to confirm exploitability during assessments.

Python-based proof-of-concept exploit for CVE-2024-39090, chaining a CSRF vulnerability with stored XSS in PHPGurukul Online Shopping Portal v2.0. Automates forged POST requests to inject persistent JavaScript payloads into user-controlled fields — executing in privileged user context upon page load, enabling session hijacking or credential theft scenarios during security assessments.

C# console banking application implementing core account management operations against a flat-file binary store. Uses a custom polynomial hash function for O(1)-average account lookup with linear probing for collision resolution, supporting user registration, authentication, fund transfers, balance updates, and account deletion — all persisted via direct BinaryReader/BinaryWriter stream manipulation over a fixed-record-width file.