[SYSTEM] Initializing system...

[BOOT] Loading core modules

[INIT] Mounting file systems [OK]

[LOAD] Starting network services [OK]

[EXEC] Executing security.sh

[INIT] Initializing user interface [OK]

[DONE] System ready [READY]

// IT Student | Exploring Cybersecurity & Ethical Hacking

> Shlok Shah (shlok)

Curious about how systems work, break, and can be secured — built by Shlok

$ ./get_profile.sh

Loading profile info...

Found: Shlok Shah

Role: IT Student | Aspiring Ethical Hacker

>Mapping attack surfaces, automating hunts, and learning to secure systems.

> Focused on Ethical Hacking & System Security

$ cat contact.txt

Phone: +91 9512-XX-XXXX

$ _|

View Projects Get In Touch

About Me

Hi! I'm Shlok, a cybersecurity and IT student passionate about ethical hacking, Linux, and exploring how systems can be secured and improved.

I focus on learning practical security skills: Kali tools, network scanning, packet analysis, and Python scripting for security tasks. I enjoy breaking things in controlled lab environments so I can learn how to secure them properly.

I'm currently self-learning cybersecurity fundamentals and will be enrolling in a short intensive ethical hacking course soon. I document experiments, small tools, and lab reports.

Years learning

Hands-on labs

∞

Curiosity

about.js

const developer = {
                        name: "Shlok",
  role: "IT Diploma Student - Exploring Cybersecurity",
  location: "Gujarat, India",
  interests: [
    "Cybersecurity & Ethical Hacking",
    "Linux (especially Kali)",
    "Python Automation",
    "Networking"
  ],
  currentlyLearning: [
    "Penetration Testing Fundamentals",
    "Web App Security & Vulnerability Scanning"
  ],
    funFact: "I break stuff to learn how to protect it. 
 Currently experimenting, exploring, and debugging my way through tech."
};

Skills & Tech Stack

Tools, security frameworks, and core tech stacks I build, test, and hack with.

AI Security, ML & Red Teaming

LLM & RAG Security (CLLMSE)

Adversarial ML (IBM ART)

OWASP LLM Top 10

PyRIT & Garak

Artificial Intelligence (A* / CNN)

Jailbreaking & Injection

Offensive Security, Cryptography & SecOps

API Hacking (CAPIE)

Red Teaming (CRTOM)

Surface Mapping (Oculus)

Kali Linux & Metasploit

Burp Suite & OWASP ZAP

Cryptography (RSA / AES / ECC)

Firewalls & IDS Defenses

OSINT & ReconMaster

280+ Sec Tools (ShellStack)

YARA & Splunk SIEM

Wireshark & Packets

Android APK Forensics

TryHackMe & Cisco Sec

AI Systems & Multi-Agent Engineering

Multi-Agent AI (Groq)

Dual-AI (NVIDIA NIM)

AI Memory (Mem0)

librosa Audio Analytics

NumPy, SciPy & Pandas

Gemini & OpenAI API

Modern Full-Stack & Web Engineering

React 19

TypeScript & JavaScript

Three.js & 3D Graphics

Next.js Monorepos

FastAPI & Flask

Node.js & Express

AJAX, DOM & JSON

Electron & Sharp

Tailwind CSS & UX

DBMS & Relational SQL

Core Engineering, Mobile & Infrastructure

C / C++ (DSA)

Data Structures & Algorithms

Computer Architecture

Operating Systems & UNIX

Software Engineering & SDLC

Python 3

Java & Multithreading

C# & .NET Framework

Android Development

Computer Networks & TCP/IP

Bash & Shell Scripting

Git & GitHub

Docker, Cloud & Virtualization

$ INSPECT: Hover or tap any skill pill above to inspect tech stack & proof metadata... [READY]

Experience

IT Diploma Student

2024 - Present

Second Year Diploma in Information Technology at MSU — focusing on programming, digital systems, and introductory cybersecurity labs.

Self-guided Security Labs

2024 - Present

Personal labs and projects in Kali Linux, network scanning, packet capture, and vulnerability scanning using open-source tools.

Education

Diploma in Information Technology

2024 - 2027 (Expected)

The Maharaja Sayajirao University
(MSU), Baroda — Third Year (Sem 5)

▸ Data Structures · C++ OOP
▸ Java · Python · SQL & DBMS
▸ Operating Systems · Software Eng

► Security · AI · Networks
► Mobile Dev · Cloud Tech
► Computer Architecture

Self-Learning & Online Courses

2024 - Present

Ongoing self-study in Python, Linux, networking, and cybersecurity through labs, tutorials, and short online courses.

Certifications & Awards

shlok@sec-node: ~/portfolio/credentials

CREDENTIALS

awards

BIOTHON_2026.dossier

CYBERTHON_2026.dossier

OffSec_Build_With_AI.pdf

NextGenHacks_Finalist.pdf

Elevate_Participant.jpg

Cybersecurity_Winner.jpg

Webgathon_Runner_Up.pdf

HackWithIndia_Quackathon_Certificate_Shlok.pdf

Webnova_2026.png

certifications

RedTeam_CLLMSE.pdf

RedTeam_CRTOM.pdf

CAPIE_API_Hacking.pdf

CBA_Cybersecurity.pdf

Udemy_AI_RAG_Jailbreak_RedTeaming.png

Microsoft_Generative_AI.pdf

Educative_CSharp_Guide.pdf

Educative_React19_Guide.pdf

Educative_Android_Java.pdf

Advent_Of_Cyber_2025.pdf

Kali_Linux_Masterclass.pdf

Android_Hacking.pdf

Cisco_Ethical_Hacker.pdf

Web_Dev_Full.pdf

Git_GitHub_Essentials.pdf

BIOTHON_2026.dossier ×

Feb 2026 VERIFIED

First Prize — Cyberthon 2026

MSU Baroda

Awarded First Prize at Cyberthon 2026, a timed cybersecurity hackathon hosted by MSU Baroda, for developing ZeroRisk Sentinel — evaluated on architecture, accuracy, innovation, and real-world security relevance.

VERIFY CREDENTIAL

// SYSTEM FILE PROPERTIES

FILE_NAME Cyberthon_First_Prize.jpg

FILE_SIZE 1.24 MB

FILE_TYPE image/jpeg

INTEGRITY_CHECK PASS [VERIFIED]

Problems

Output

Debug Console

Terminal

shlok@sec-node:~/portfolio/credentials$ cat ./awards/Cyberthon_First_Prize.jpg

[~] Mounting digital credential volume...

[+] Integrity check: 256-bit signature verified.

[i] Extraction: Title="First Prize — Cyberthon 2026" | Issuer="MSU Baroda" | Date="Feb 2026"

[+] Document ready. Opening in graphic visualizer pane.

shlok@sec-node:~/portfolio/credentials$

Featured Projects

★ FEATURED

Chronicle

AI-native incident response & operational memory platform

Next.jsExpressSupabaseGroqMem0

★ FEATURED

Watchtower

GitHub portfolio intelligence & autonomous 24/7 alert engine

React 18ViteVercelNode.jsGitHub APIDiscord/Telegram

★ FEATURED

KAVACH

Multi-modal cyber fraud defense with Voice, Job & SIM shields

React 19FastAPIGroqNVIDIA NIM

★ FEATURED

PRAXIS

AI-native financial simulator with multi-agent council debates

React 19Three.jsLlama 3.3 70BFastAPI

★ FEATURED

ZeroRisk Sentinel

Hybrid threat detection with YARA scanning & AI intelligence

FlaskPythonYARAGroq

★ FEATURED

Oculus v4.2.0

Automated attack surface mapping and vulnerability orchestration engine

PythonFastAPIReactSecurity

Oculus v4.2.0 — Attack Surface Mapping & Vulnerability Orchestration Engine

~/projects/Oculus/README.md

Oculus v4.2.0 is an automated security orchestration engine designed to automate the full penetration testing lifecycle. It chains 37 specialized security tools—including Subfinder, Amass, dnsx, httpx, Naabu, Nmap, Katana, gau, WhatWaf, Nuclei, Jaeles, ParamSpider, Arjun, LinkFinder, ffuf, Kiterunner, subzy, massdns, whatweb, sqlmap, Dalfox, smuggler, Cariddi, Tplmap, CRLFuzz, TLSX, nomore403, and Nikto—into concurrent, multi-phase execution pipelines, spanning active/passive reconnaissance, vulnerability discovery, and targeted exploitation.

Dashboard & CLI Integration: Run scans natively via a terminal-based CLI interface, or manage targets and execution parameters through a browser-based web dashboard.

Concurrent Execution Engine — Orchestrates multi-phase target scanning concurrently using thread-safe execution locks, reducing scanning cycles from hours to minutes.
Session Checkpointing & Resume — Features persistent session state tracking (session.json) after each execution phase, offering robust resume-friendly runs that skip completed tasks based on artifact checks.
Full-Surface Threat Discovery — Integrates active probes with passive intelligence lookups to map hostnames, DNS configurations, and IP ranges without generating unnecessary active network traffic.
Deep Content & Vulnerability Analysis — Automates parameter discovery, API route mapping, JS credential scanning, and vulnerability validation across independent execution tracks.
Dynamic Resource Scaling — Dynamically adjusts timeouts, scan parameters, and thread allocation based on target host counts and network responsiveness to prevent thread blocking.
Real-Time Web Dashboard — A browser interface built with FastAPI and React to manage scan options, follow live runtime logs, and inspect target reports.
ntfy Push Alert Engine — Pushes real-time, status-tailored notifications (scan starts, completions, high-severity findings, skipped phases, and exceptions) to authenticated private or public topics via an integrated setup wizard.
Unified Report Compiler — Automatically translates scattered CLI logs and tool outputs into interactive dark-themed HTML dashboards, sortable tables, HackerOne-style Markdown reports, and structured JSON files.

View Code

★ FEATURED

Cura AI

Full-stack virtual patient simulator for clinical practice

Node.jsExpressReactGeminiSupabase

★ FEATURED

SwipeClean

Tinder-style desktop file cleanup with swipe & keyboard flow

ElectronReactTypeScriptSQLite

★ FEATURED

ShellStack

280+ offensive security tools & 1,000+ commands unified

React 19TypeScriptVercel

★ FEATURED

Project Babel

High-performance OSINT wordlist generator & target profiling engine

Next.js 15React 19TypeScriptOSINTHashcat/JtR

Project Babel — Advanced OSINT Wordlist & Profiling Engine

~/projects/project-babel/README.md

Project Babel is a high-performance OSINT targeted wordlist generator and target profiling engine engineered for penetration testers and red team operators. Built on Next.js 15 and React 19, it translates structured OSINT intelligence (names, aliases, significant dates, relationships, custom keywords) into hundreds of thousands of targeted password permutations in milliseconds using a 27-engine permutation orchestrator operating directly within local memory.

15-Stage Target Profiling Matrix — Ingests over 120 distinct data points including biological identity, family/pet names, relationship milestones, cultural numerology, and vehicle metadata.
27-Engine Permutation Orchestrator — Generates deep multi-vector permutations including Markov Chains & Combinatorics, Leetspeak (1337) hybridization, regional date formats (DDMMYYYY, MMDDYY, epoch), keyboard walks, and symbol wrapping.
Zero-Footprint In-Memory Heap — 100% serverless and client-side (JavaScript V8 engine); all permutations execute dynamically in local memory with zero API network telemetry, ensuring total operational security and air-gapped readiness.
Shannon Entropy & GPU Crack-Time Analyzer — Real-time mathematical analysis calculating Shannon Entropy, pattern repetition penalties, and estimated brute-force crack times against multi-GPU Hashcat arrays (RTX 4090 / A100 rigs).
Format-Agnostic Export Matrix — Generates formatted downloads as raw `.TXT`, metrics-enriched `.CSV`, `.JSON`, and rule-compatible dictionaries tailored directly for Hashcat (`-m 1000/0`) and John the Ripper.
Cyberpunk Command Center UI — Distraction-free, responsive dark matrix interface featuring real-time stream counters, batch generation throttling, and instant one-click clipboard copying.

View Code

★ FEATURED

Interceptor

Android notification vault with biometric locking & security rules

AndroidKotlinJetpack ComposeCryptography

VitaLink

Empathic AI health companion web app targeting UN SDG 3

React 19ViteOpenAI APIi18n

Periscope

Local port telemetry and AI-driven threat diagnostics

PythonCustomTkinterGroqSecurity

★ FEATURED

CyberGuard

Password security suite with AES-256 vault & breach detection

JavaScriptAES-256Crypto

OPSEC Hardening Suite

47-vector Linux kernel hardening, Tor routing & anti-forensics suite

BashLinux KernelToriptablesAnti-Forensics

OPSEC Hardening Suite — Complete Linux Security & Anti-Forensics Engine

~/projects/opsec-hardening-suite/opsec.sh

A battle-hardened Linux OPSEC and anti-forensics automation suite ("Immortal Mode") designed to neutralize 47 distinct attack and tracking vectors. It combines transparent Tor networking, hardware identification spoofing, kernel parameter hardening via `sysctl`, memory sanitization, and automated forensic log stripping into a single deterministic script with automated audit (`status_check.sh`) and recovery (`reversal.sh`) routines.

47-Vector Threat Neutralization — Eliminates MAC tracking, ARP cache poisoning, DHCP/hostname fingerprinting, IPv6 leaks, DNS leaks (Tor DNS + DoT), WebRTC exposures, CPU/DMI serials, and TCP/IP stack fingerprints.
Transparent Tor Routing & Circuit Rotation — Forces all system outbound network packets through isolated Tor daemon socks/trans proxies with automatic circuit hops every 10 seconds and strict iptables killswitches.
Hardware & System Masking — Randomizes network interface MACs, spoofs DMI UUIDs, filters `/proc/cpuinfo` and `/sys/block` disk serials, and injects synthetic clock skews to defeat timing analysis.
Anti-Forensics & RAM Sanitization — Enforces encrypted swap volumes, executes secure RAM wiping routines (`sdmem` / `memset_secure`), touches random file creation timestamps, and runs an automated 60-second log-clearing daemon.
Kernel Hardening (sysctl) — Restricts `dmesg` access (`kptr_restrict=2`), enforces SYN cookies, drops ICMP broadcast probes, disables ICMP redirects, and disables unused network modules (SMB, UPnP, SNMP, Bluetooth).
Automated Verification & Safe Reversal — Includes an automated multi-vector audit engine (`status_check.sh`) to verify Tor egress, firewall locks, and hostname anonymity, paired with a deterministic `reversal.sh` single-command recovery pipeline.

View Code

Claude Pinger

Automated Cloudflare Worker scheduler & native Android telemetry companion

Cloudflare WorkersPuppeteerKotlinJetpack ComposeAndroid

Claude Pinger — Automated Cloudflare Keep-Alive & Android Telemetry Companion

~/projects/claude-pinger/README.md

A serverless automation and monitoring system engineered to maintain uninterrupted Claude.ai rolling rate limit windows. It pairs a Cloudflare Worker cron orchestrator leveraging headless browser automation (Puppeteer via Browserless) with a native Android companion app (ClaudePulse) featuring live telemetry and interactive home screen widgets.

Dual-Account Staggered Scheduling — Alternates automated keep-alive pings across multiple accounts every ~2.5 to 3 hours, ensuring rolling 5-hour limit windows remain active throughout the workday.
Free-Tier Cron Compression — Smartly compresses 8 daily staggered runs across 2 accounts into 5 multi-schedule cron triggers to strictly comply with Cloudflare Workers Free Tier limits.
Race-Condition Prevention — Incorporates an exact +2 minute safe buffer past the 5-hour expiration boundary, eliminating early-ping collisions and wasted quotas.
Stealth Bot Evasion — Masks automation flags (`navigator.webdriver`), overrides HTTP user-agents, and dynamically reuses single chat threads (`Ping test`) to bypass Cloudflare Turnstile without account noise.
Ultra-Low Token Quota Preservation — Utilizes prompt-engineered triggers (`"ping. Reply with '.' only."`) to limit responses to a single character (`.`), preserving 99.99% of daily message allowances.
Native Android Companion App — Built with Kotlin and Jetpack Compose (`ClaudePulse`), providing live Cloudflare worker telemetry, manual ping triggers, and a home-screen `PulseWidget` displaying rolling cooldowns.
Zero-Secret Security Architecture — All session tokens, Browserless credentials, and direct chat URLs are sealed inside Cloudflare Worker encrypted secrets with zero exposure in client bundles.

View Code

CyberForge Atlas

Offline payload references & exploitation playbooks

JavaScriptPythonOffline-First

Open-Port Reaper

Async 65K-port scanner with risk tagging & PDF reports

PythonAsyncPDF

ReconMaster v2

12+ recon tools chained in one automated framework

Kali LinuxBashPython

OSINT Tools Directory

Curated intelligence toolkit with fast search & filtering

ReactTypeScriptTailwind

OWASP ZAP Lab

Structured web app vulnerability assessments & reports

OWASP ZAPSecurityHTML

AskMeBot

AI Discord bot with smart replies & image generation

Discord.jsOpenRouterAPI

OSINT Academy

Interactive OSINT learning with Google Dork generator

JavaScriptOSINTMatrix UI

Python Keylogger

Keystroke capture demo with automated email delivery

PythonSMTPAutomation

MailGuard

Email security header analyzer for phishing forensics

PythonSecuritySPF/DKIM/DMARC

Currently Working On

WIP

GHOST — Zero-Knowledge Encrypted Messenger

Free, open-source end-to-end encrypted messaging where not even the server can read messages. Signal Protocol + X3DH key exchange. Android APK + Web app with zero metadata leakage for journalists, activists, and privacy-conscious users.

Core crypto done, frontend in progress

WIP

TabMaster Pro — Ultimate Tab Manager Extension

Advanced Chrome/Edge extension with visual card grid + AI summaries, auto-grouping by domain, focus modes, mouse gestures + voice control. Features panic mode for productivity, Tab DNA graphing, and smart tab suspension.

Core features built, polishing UI

WIP

CHIMERA — AI-Powered Adaptive Red Team Framework

Full-stack penetration testing framework with real reconnaissance + vulnerability scanning, adaptive payload generation, and attack chain discovery via Neo4j. FastAPI backend + React frontend with REAL DNS, port, and code injection testing.

Scanner engine scaffolding, DB integration pending

Recent Activity

Recent commits, fixes, and experiments as they land.

Signal stream Syncing recent pushes...

Stream warming up

Pulling in the latest public commit activity for this slot.

live activity feed

now

12+ Public repos

Security Main focus

Labs Build style

Live When online

Live + curated

Repository Radar

Curated view loaded. Live GitHub data appears when available.

Featured Build Fraud Defense

KAVACH

Multi-modal cyber fraud defense with voice, job, and SIM-based protection layers designed around real-world abuse patterns.

Python / FastAPI / Security

Open repo

Simulator AI Systems

PRAXIS

AI-native financial simulator built around multi-agent council debates, risk modeling, and decision pressure testing.

Agents / Strategy / Finance

Open repo

Detection Blue Team

ZeroRisk Sentinel

Hybrid threat detection with YARA scanning, reputation checks, DNS and TLS analysis, and AI-assisted explanations.

YARA / Python / Threat Intel

Open repo

Toolkit OffSec

ShellStack

A consolidated offensive security reference with 280+ tools and over 1,000 commands organized for fast execution.

Kali / Reference / Workflow

Open repo

Learning OSINT

OSINT Academy

Interactive OSINT learning with guided workflows, Google dork generation, and a cleaner investigative interface.

Web / OSINT / Training

Open repo

Get In Touch

Email

Email Me

GitHub

Open GitHub

Open LinkedIn

Instagram

DM on Instagram

Discord

Discord @shlokkokk

~/projects/