Engineering web applications and native desktop software.

WordPress Differential Security & Cloaked Threat Scanner

Advanced WordPress security scanner that exposes stealth backdoors, hidden administrators, and cloaked doorway pages using differential raw database and filesystem auditing.

• Differential Auditing: compares raw $wpdb tables against get_users() and WP_Query filters to catch rogue hidden admins and doorway pages.
• Filesystem vs. Filter Audit: physically scans WP_PLUGIN_DIR using DirectoryIterator to uncover backdoors filtered out of all_plugins.

Decoy Login Trap & Bot Interception for WordPress

A lightweight security decoy plugin listed on the official WordPress.org repository. It traps automated bots and brute-force scanners with fake admin logins.

• Decoy Authentication Portal: serves an authentic-looking fake login interface to divert automated scrapers and bots.
• Automated Brute-Force Defense: logs attacker IP addresses, user agents, and attempted credentials with automatic lockout after 3 failed attempts.

Local-First Encrypted Desktop Notes for Linux

Fast, modular desktop note maker and secret manager for Ubuntu Linux built with Python 3, GTK4, Libadwaita, and Fernet AES authenticated encryption.

• End-to-End Local Cryptography: PBKDF2-HMAC-SHA256 key derivation with 480,000 iterations + 16-byte cryptographically secure salt.
• Authenticated Fernet Encryption: AES-128-CBC + HMAC-SHA256 encrypts note titles, contents, and export archives before SQLite disk persistence.