whoami

• 🎓 BCA student, Dept. of Computer Applications, Birendra Multiple Campus (Tribhuvan University)
• 🛠️ Building full-stack web apps with PHP/MySQL, learning React/Node on the side
• 🔐 Currently deep in a bug bounty prep roadmap: TryHackMe JPT → PortSwigger Web Security Academy → HackTheBox/PentesterLab → recon tooling → live disclosure programs
• 🧪 Practicing SQL injection (UNION-based extraction, information_schema enumeration, DBMS fingerprinting) hands-on in DVWA and PortSwigger labs — no live/unauthorized targets
• 🐧 Daily driver: Arch Linux + Hyprland
• 📍 Chitwan, Nepal

stack

security toolkit

featured projects

🧠 ArchQuery Natural-language → Arch Linux command CLI. Fuzzy search over a curated command database with LLM fallback, AUR (yay/paru) equivalents, danger warnings, and usage history. Node.js fuse.js Anthropic SDK	🛡️ seccheck Developer privacy/security scanner for Node.js codebases — hardcoded secrets, exposed .env files, git hygiene, dependency CVEs, misconfigurations, CI exit codes, and score trend tracking. Node.js CLI
🏙️ CivicAI AI-powered civic issue reporting platform (SDG 11) — built in 48 hours at Codefest 2026. React/Vite frontend, Node/Express backend, graceful AI degradation chain (Gemini → Claude → offline classifier), and a full admin management system with role-based routing and analytics. React Vite Node.js Express

stats

📫 [email protected]