Undergraduate Developer · Kali Linux & macOS

Softwareengineer&securitybuilder

Undergraduate developer building local-first software, systems automation, and defensive tooling.

DEV_WORKBENCH::ACTIVE
ARM64 / X86_64
OPERATOR IDENTITY
Aman Kumar Pandey
BCA Student · Security Builder
Zero-Telemetry PolicymacOS & Kali Linux
PORTFOLIO SHOWCASE

Curated Projects & Tooling

Local-first investigative software, event-driven engines, and container services.

TRACEFORGE
2024
// traceforge_analyzer.py
Python 3
from traceforge.forensics import IOCDefanger, StixBundle
defanger = IOCDefanger(offline_mode=True, zero_telemetry=True)
bundle = defanger.extract_indicators(target='forensic.bin')
print(f'[+] Hash: {bundle.sha256} | STIX 2.1: Validated')

A local-first OSINT and digital forensics investigation toolkit in Python & SQLite.

Eliminates third-party telemetry leaks by executing file hashing, IOC defanging, and STIX 2.1 serialization 100% offline.

Python 3SQLiteSTIX 2.1DFIRLocal-First
Repository
ASTRA ENGINE
2024
// astra_stream.py
Async Python
import asyncio from astra import Engine, MessageStream
engine = Engine(headless=True, session_persist=True)
@engine.on_stream(filter='text|media')
async def route_event(stream: MessageStream):
await stream.dispatch_to_isolated_worker()

Asynchronous Python library for headless WhatsApp Web automation.

Built using Playwright and an in-browser JavaScript bridge to manage background event loops, pairing codes, and message streaming.

PlaywrightAsyncIOWeb AutomationEvent-Driven
Repository
WHATSAPP-X
2024
// pipeline.dockerfile
Docker / Node
FROM node:20-alpine AS pipeline
RUN apk add --no-cache ffmpeg chromium
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
CMD ["node", "dist/transcoder-worker.js"]
# [transcoder] 4 worker threads | zero dropped frames

Containerized Node.js service for automated media transcoding pipelines.

Headless Chromium via Puppeteer, streaming media conversion through FFmpeg sub-processes, and asynchronous session logging in MongoDB.

Node.jsFFmpegDockerPuppeteerTranscoding
Repository
ASTRA USERBOT
2024
// plugin_manager.py
Python / SQLite
import importlib, sqlite3
class DynamicPluginLoader:
def reload(self, module_name: str):
mod = importlib.reload(importlib.import_module(module_name))
return mod.register_handlers(db_isolate=True)

A modular bot framework with dynamic runtime plugin loading.

Hot-reloading plugin architecture using Python importlib, local configuration isolated in SQLite, and background daemonization via systemd.

Hot-ReloadimportlibSQLitesystemdAutomation
Repository
View all projects
ENGINEERING ETHOS · GROUND TRUTH

How I build software

Architectural principles guiding offline execution, asynchronous runtime loops, and defensive security.

PRINCIPLE_01·VERIFIED SPECIFICATION
Case Study: TraceForge

Local-First & Telemetry-Free Architecture

Modern investigative and forensics tooling should never leak hashes, IP addresses, or indicator metadata to third-party cloud infrastructure. Core cryptographic analysis, SQLite storage, and STIX 2.1 serialization run completely in-process.

NETWORK EGRESS
0 bytes dispatched
STORAGE ENGINE
Embedded SQLite (WAL mode)
INTEGRITY
MD5, SHA-1, SHA-256
// traceforge_implementation.spec
# Offline STIX 2.1 Bundle serialization
from traceforge.forensics import IOCDefanger, StixBundle
defanger = IOCDefanger(offline_mode=True, zero_telemetry=True)
indicators = defanger.extract_from_binary("suspect.bin")
assert len(indicators.network_calls) == 0  # 100% offline
Get In Touch

Let’s connect

Have an opportunity, an open-source inquiry, or a security collaboration in mind? Fill out the form or reach out directly to my personal inbox.

2026 © Aman Kumar Pandey · India

GPG / Proton-Encrypted: paman7647@proton.me

TOPIC
0 / 1000

Submissions go straight to my inbox via Web3Forms. No tracking cookies or marketing scripts.

DIRECT EMAILpaman7647@proton.me
CURRICULUM VITAEView Resume