offline-security

BAR (Burn After Reading) is my project to showcase skills in security, cryptography, and logic design. It’s an offline desktop app for sensitive file management with encryption and self-destruction features. All security and crypto logic is publicly available in this repo.

A private password manager that stores all data locally, with no server connection required.

Quantum-Seeded Password Generator & Secure Vault

🏕️🌲 A comprehensive project showcase website for SecureScape. A portable smart security system designed for remote locations. Features ESP32-CAM nodes, embedded AI detection, and offline operation. Built with modern web technologies and responsive design to document our UCF Senior Design journey.

Local encrypted workspace manager using libsodium + C++20. Projects decrypt only in RAM for maximum security.

Temur-Password-Manager: A secure Windows vault for encrypted credential storage. Features Offline-Security, automated organizing, and a Secure-Vault-API.

💾 Encrypt like the pros. Only you can open it. RobinCrypt, the pocket-sized mini-Vault that lives on your USB drive.

Catalog HTTP request parameters and flag token/PII-shaped values — parameter inventory for AppSec testing and privacy reviews.

Offline network asset inventory from nmap/masscan — host discovery, service mapping, fingerprint tagging, baseline diff for cyber security teams.

Detect dangerous CORS configs — wildcard+credentials, reflected Origin, and misconfigured Access-Control policies for web APIs.

Inspect HAR/request sets for sensitive parameters, missing auth, and risky HTTP patterns — offline web request security analysis.

Aggregate HTTP security headers, TLS, and cookies into a web security posture score — offline AppSec posture assessment for websites and APIs.

Snapshot header/cookie/CSP posture and diff baselines — catch web security regressions in CI and release gates.

Signature-based file carving over disk-image exports — recover deleted files for DFIR investigations offline.

Discover API endpoints from JS bundles, HAR, OpenAPI, and sitemaps — build offline API attack-surface inventories for pentests.

Interactive host/subnet/service topology graphs from asset data — visualize network architecture, attack paths, and exposure for security reviews.

Build known-clean network traffic baselines for anomaly detection — create reproducible offline baselines for SOC and blue-team workflows.

Baseline-driven network anomaly detection using z-score/EWMA — flag unusual traffic volume, peers, and protocol shifts offline.

Generate CycloneDX/SPDX SBOMs from project manifests — software bill of materials for compliance, AppSec, and supply-chain security.

Interactive dependency tree visualization highlighting risky nodes — understand transitive risk in software supply chains.