01 Engineering & Security Dossier

Systems, OSINT & Vulnerability Research

A documented record of self-hosted intelligence platforms, automated reconnaissance pipelines, and verified responsible disclosures across critical infrastructure.

1.14 TB Sensitive Data Protected
450+ Active Users on TBV Bot
10+ LAN Platform Modules
Google Dragon Badge Verified
Filter dossier:
01
Intelligence Platform Jan 2026 — Present
OPERATIONAL
TBV Server
10+ Integrated Modules · Zero Cloud Dependency

TBV Server

Self-Hosted LAN Intelligence Platform

A full-stack, self-hosted web intelligence server running on local networks. Combines real-time telemetry, WebRTC CCTV streaming, WiFi reconnaissance, and AWS S3/GCS bucket audits into a single unified control panel.

Key Architecture & Engineered Capabilities

Real-Time Telemetry Dashboard

Sub-second monitoring of CPU utilization, RAM consumption, disk health, and network throughput with live graphs.

Live CCTV Surveillance Engine

WebRTC and HLS streaming support with automated background session management, video storage, and frame capture.

WiFi & Network Discovery

Automated local network device scanning, wireless channel analysis, and connected node profiling.

Cloud Bucket Auditing Engine

Scans AWS S3 and Google Cloud Storage buckets for sensitive files, unauthenticated exposures, and bulk export.

HTTP Request Replicator

Multi-threaded execution engine supporting cURL, Fetch, and HAR formats for replaying and analyzing security payloads.

Automated Daemon Workflows

Self-healing background workers for session cleanup, disk monitoring, CCTV stream rotation, and automated backups.

Operational & Security Impact

Deployed in local lab environments behind Nginx reverse proxy; powers unified operational monitoring and OSINT workflows without exposing telemetry to external third-party services.

Technologies:
FastAPISQLAlchemySQLiteNginxWebRTCLinuxPython
02
OSINT & Forensics Mar 2025 — Jul 2025
RETIRED (450+ USERS)
TBV Bot
450+ Active Practitioners · Scaled OSINT Pipeline

TBV Bot

OSINT Automation & Threat Intelligence Engine

A high-throughput OSINT automation tool deployed to 450+ security practitioners and researchers for breach intelligence, public asset reconnaissance, and identity correlation.

Key Architecture & Engineered Capabilities

Breach Intelligence Ingestion

Automated ingestion pipelines detecting leaked credentials, password hashes, and compromised account artifacts.

Social Reconnaissance Engine

Scrapes Twitter/X profiles, correlates metadata with public Google Maps contributions, and builds behavioral timelines.

Digital Forensics Entity Lookup

Extracts corporate business registrations, ownership records, and identity footprints from lawful government sources.

High-Concurrency Rate Limiting

Engineered with custom throttling and backoff algorithms to prevent rate-limit blocks across third-party targets.

Operational & Security Impact

Served as an active operational utility for over 450 security researchers, demonstrating that lightweight Python architectures can deliver enterprise-grade OSINT correlation at scale.

Technologies:
PythonOSINT AutomationBreach IntelDigital ForensicsThreat Intelligence
03
Vulnerability Research Jun 2024 — Present
VERIFIED DISCLOSURES
Vulnerability Disclosures & Bug Bounty
1.14 TB Sensitive Data Protected · Google Dragon Badge

Vulnerability Disclosures & Bug Bounty

High-Impact Responsible Disclosures

Systematic vulnerability discovery across web applications, APIs, and cloud infrastructure. Discovered critical flaws in major tech platforms and mitigated massive exposures affecting private firms and institutions.

Key Architecture & Engineered Capabilities

YouTube Critical XSS & Open Redirect

Identified and responsibly reported critical Cross-Site Scripting (XSS) and Open Redirect flaws in YouTube; awarded Google Bug Hunters Dragon Badge.

Bugcrowd Platform Security

Reported and validated an Open Redirect vulnerability in Bugcrowd’s own researcher platform; recognized with Submission Shogun and Bounty Bee badges.

1.14 TB Data Leak Prevention

Uncovered systemic misconfigurations across 5 Pakistani software firms, safeguarding 1.14 TB of sensitive employee, customer, and financial data.

Educational Institution Remediation

Coordinated with academic administrators to seal a critical leak exposing thousands of student identity and academic records.

Operational & Security Impact

Directly prevented severe data breaches, improved vendor remediation timelines, and demonstrated reliable, ethical vulnerability reporting across multinational tech giants and local software ecosystems.

Technologies:
Google Bug HuntersBugcrowd ShogunXSSOpen RedirectCloud Auditing1.14 TB Secured
04
Systems & RF Apr 2026 — Present
LIVE PRODUCTION
PARS Infrastructure & Radio Research
Deployed at pars.pk · Emergency Communications

PARS Infrastructure & Radio Research

Pakistan Amateur Radio Society Web Redesign & SIGINT

Visit Live Site

Led the comprehensive redesign and public deployment of pars.pk for the Pakistan Amateur Radio Society, advancing RF concepts, amateur radio telecommunications, and wireless security research.

Key Architecture & Engineered Capabilities

Web Presence Overhaul (pars.pk)

Independently designed, developed, and deployed the official website with modern typography, responsive architecture, and optimized assets.

Wireless Security & SIGINT

Exploration of Software Defined Radio (SDR) concepts, frequency monitoring, and signals intelligence-oriented analysis.

Emergency Radio Technology

Honored with Certificate of Recognition at Sindh Madressatul Islam University (SMIU) for work on Civil Applications of Radio in Emergencies.

Community & Technical Outreach

Facilitating knowledge sharing around radio regulations, amateur licensing, antenna design, and emergency radio drills.

Operational & Security Impact

Transformed the national organization’s web presence into a reliable public hub, while providing practical foundations for RF wireless reconnaissance and communications resilience.

Technologies:
Web DesignLive at pars.pkRF SystemsSDRSIGINTEmergency Comms