Project index
Project Directory
A curated index of live products, software tools, security research, and engineering experiments.
Learning platform and certification hub
MultiHAT Academy (Continuous)
A polished academy experience for books, certificates, learning progress, and reward-driven showcase flows.
Offline-first AI workflow
PromptVault
A private command center for saving, organizing, and refining high-value AI prompts without subscription lock-in.
Dual-AI security training game
PhishGuard
A real-time phishing awareness game that turns inbox threat recognition into a fast, replayable training loop.
Premium local business website
Sydney Wheels & Tyres
A high-performance automotive marketing site built to convert service intent into calls, messages, bookings, and local search visibility.
Cybersecurity identity system
Sagar Biswas Portfolio
A privacy-first developer and cybersecurity portfolio for projects, tutorials, blog posts, and technical proof of work.
Privacy-first browser utility
WiFi QR Generator
A no-backend Wi-Fi QR generator that creates exportable network payloads entirely in the browser.
Accessible offline security tool
Password Strength Checker
A client-side password checker and generator with entropy estimates, pattern detection, and actionable feedback.
Flask-based URL shortener with custom aliases
SharpLink URL Allies
A clean, self-hosted URL shortener that converts long links into short, branded URLs with custom aliases, expiration windows, and optional TinyURL mirroring.
Production-ready 2FA auth architecture
Multi-Factor Authentication
An end-to-end authentication and multi-factor security demo featuring email OTP verification, TOTP authenticator app support, emergency backup codes, and resilient Brevo/SMTP failover.
Passive OSINT reconnaissance toolkit
Attack Surface Toolkit
A module-based passive recon tool that maps a web domain's full external exposure — subdomains, DNS, SSL, headers, tech stack, Wayback history — and scores it 0–100 with a presentation-ready report.
OSINT email discovery CLI tool
Email Harvester
A production-ready Python CLI that discovers publicly listed business email addresses from category keywords, with multi-backend search fallback, robots.txt-aware crawling, Hunter.io enrichment, MX validation, and deterministic quality scoring.
Polite web scanner with LLM remediation helper
Web Vulnerability Scanner & AI Triage
A queue-based, rate-limited Python web security scanner that inspects headers, cookie flags, reflected XSS, and SQL error patterns — paired with an interactive HTML report and an AI-powered triage assistant.
Cryptographic hashing & attack simulation toolkit
HashAttackDemos
An educational security toolkit comparing modern password hashing algorithms (Argon2id, bcrypt, scrypt) with attack simulations including dictionary, rainbow table, and hybrid cracking models.
Privacy-first phone number OSINT & risk scoring
Phoneint OSINT Toolkit
A privacy-focused phone intelligence toolkit (CLI + PySide6 GUI) that normalizes numbers to E.164, enriches carrier/location metadata, runs async OSINT adapters, and computes explainable risk scores.
Multi-client socket server & encrypted chat toolkit
TCP-Playground
A lightweight, cross-platform Python TCP networking and multi-client chat toolkit featuring dual-mode transport (plaintext TCP vs. TLS encryption), password authentication, broadcast routing, and network socket utilities.
Wireless WPA/WPA2 security testing script
WiFi Dictionary Attack
A Python-based wireless security auditing tool that discovers nearby Wi-Fi networks, targets designated SSIDs, and runs dictionary-based WPA/WPA2 authentication tests using PyWiFi.
Production-grade Linux MAC spoofing & restoration CLI
MAC Address Changer (V1-MAX)
A resilient, production-ready Python CLI utility for Linux that inspects, spoofs, randomizes, and restores network interface MAC addresses with strict validation and safe backup persistence.
Passive intelligence & attack surface exposure framework
OSINT Exposure Toolkit
A modular, passive open-source intelligence CLI that aggregates credential leaks, GitHub footprint secrets, DNS/email posture, social profiles, and public exposure signals into interactive HTML reports, graph topologies, and executive scoring.
Production-ready Nmap scanner with 12 preset profiles
Nmap Scanning Tool (V1-MAX)
A robust, production-ready Python CLI wrapper for Nmap providing 12 preset scan profiles (SYN stealth, OS detection, vulnerability/NSE scripts, SSL/TLS ciphers, and Heartbleed), custom arguments, input validation, and open-port filtering.
Breadth-first web crawler & offline source asset reconstructor
WebSource Harvester (Web Crawler)
An educational, depth-controlled web crawler and client-side source code harvester that performs BFS traversal, downloads browser-visible assets (HTML, CSS, JS, images, fonts, PDFs), and rewrites relative paths for offline browsing.
Desktop GUI application with 2FA
Library Management System
A Python Tkinter desktop application for cataloging books, tracking member loans, calculating overdue items, and managing circulation, secured with SHA-256 password hashing and TOTP 2-factor authentication.
Offline Windows desktop conversion tool
Photo ↔ PDF Bidirectional Converter
A lightweight Python desktop app that converts photos into high-quality PDFs and extracts PDF pages back into images — with EXIF rotation, DPI control, and three embedding modes.
Safety-first Python desktop text editor
PyTextEditor
A cross-platform Tkinter text editor built for resilience and productivity — featuring atomic saves, BOM-aware encoding detection, regex find/replace, and crash recovery.
Production-grade C++17 POS receipt & persistence engine
Customer Slip Generator (CLI)
A fast, cross-platform C++17 command-line point-of-sale utility that captures customer transaction details, computes discounts and totals, prints formatted receipts, and atomically persists records to CSV and JSONL.
Local desktop AI assistant with Groq LLM & workflow shortcuts
BlackHAT AI Assistant
A lightweight Python Tkinter desktop assistant integrating Groq LLM inference, natural command web automation (Google, YouTube, GitHub), persistent JSON session memory, and custom UI theming.
Safety-first Python scientific calculator with AST evaluation
PyCalculator
A secure, modern Python scientific calculator built with Tkinter featuring an AST-based expression evaluator (preventing raw eval security risks), degree-based trigonometry, square root, exponentiation, and Pytest coverage.
Automated Windows temporary cache & prefetch cleaning utility
WinTempCleaner
A lightweight Windows batch utility engineered to wipe volatile temp repositories (%TEMP%, %WINDIR%\Temp, AppData\Local\Temp, and Prefetch) with interactive safety confirmations, error suppression, and color feedback to maintain endpoint hygiene.
Automated SMTP stress-testing & email protocol experiment
Email Bomber (SMTP Automation Experiment)
An educational Python scripting experiment demonstrating automated email delivery loops via Gmail SMTP, with email format validation, secure masked credential input, and HTML payload rendering.