About
Hello, I'm Mubarak, an aspiring cybersecurity engineer and an entry-level Django/FastAPI developer. I'm passionate about cybersecurity, scripting, and generally making and breaking systems with Python, Django, and FastAPI.
Secure peer-to-peer file transfer with no accounts and no cloud. Encrypts everything end-to-end using XChaCha20-Poly1305 with X25519 key exchange and Argon2id key derivation. Both peers authenticate via a shared 3-word code — whoever has the code can decrypt. Every file is integrity-checked with BLAKE2b-256.
# Sender listens and gets a wordcode
drop send secret.pdf
# => code: 472-falcon-ridge-ember
# Receiver connects with the code
drop receive 472-falcon-ridge-ember -c 10.0.0.1 -o ~/downloads/
The easy way to handle webhooks in Python. Includes automatic retries, signing, and verification. Built on asyncio and aiohttp for high performance.
import asyncio
from lazyhooks import WebhookSender
async def main():
sender = WebhookSender(signing_secret="super-secret")
await sender.send("https://example.com/webhook", {
"event": "user_signup",
"user_id": 12345
})
asyncio.run(main())
A persistent, stealth device tracker for Windows built in case my laptop ever gets stolen. Controlled entirely via Telegram — send a command and get back the device's location, public IP, hostname, and OS info. Survives reboots through Registry and Scheduled Task persistence, and has a built-in watchdog that restarts the process if it crashes.
/location — Get current device location
/info — Hostname, OS version, public IP
/start — Show help menu
Red team site cloner and phishing simulation framework for authorized engagements. Clones target sites recursively, serves them with credential capture hooks, and supports a reverse proxy relay mode that sits between the target and the real server — capturing credentials, session cookies, and MFA tokens in real time. Includes full campaign management, email delivery with tracking, and HTML/JSON reporting.
# Initialize engagement with scoped domains
mirage init -e "ENG-2026-001" -d "login.target.com" -o "operator"
# Clone the login page
mirage clone -t https://login.target.com -o ./site
# Or use reverse proxy relay for real-time token capture
mirage proxy -t https://login.target.com -l 443 --ssl
# Run campaign and review results
mirage campaign send -n "Q1-Phish" --smtp smtp.relay.com
mirage report generate -n "Q1-Phish" --format html
A small, Turing-complete esoteric programming language with provocatively English-like
syntax. The interpreter is written in C11 with no external dependencies and builds to a
single executable. Programs use .aids source files and the language
supports variables, conditionals, loops, user-defined functions, and basic I/O.
enough foreplay
yell "hello world"
I came.
regards.
A lightweight RAG (Retrieval-Augmented Generation) pipeline for querying markdown documents using an LLM via OpenRouter. Supports both an interactive CLI and a FastAPI HTTP server. Documents are ingested into a vector store and retrieved at query time to ground the model's responses in the actual document content.
.md files into a
vector store.# Ingest your docs
python src/ingest.py
# Query interactively
python src/cli.py "What is RAG?"
# Or run the API server
python src/api.py # POST /query, POST /ingest
A lightweight Telegram bot for checking live cryptocurrency prices directly inside Telegram. Pulls real-time market data from the public Binance API — no dashboards, no charts, no noise. Designed to be low-resource and easy to deploy locally or on cloud platforms like Heroku.
/price BTCUSDT.
/price BTCUSDT — Get current Bitcoin price
/price ETHUSDT — Get current Ethereum price
START A PROJECT