Projects & Works
A comprehensive showcase of my technical projects, vulnerability research, academic writings, and cultural & community initiatives.
Coinbase Vulnerability Disclosure
Identified a vulnerability in OAuth2 redirect and token validation workflows during responsible research. Submitted a reproducible proof-of-concept, validated by security engineers, and rewarded with an international bounty.
AxoRecon Automation Suite
A fast, modular reconnaissance engine built in Python for bug bounty hunters and researchers. Automates subdomain discovery, DNS brute-forcing, live port resolution, and pattern matching.
Distributed Rate-Limit Concurrency Tester
Designed to detect race conditions in cloud edge rate limiters by testing single-packet HTTP/2 multiplexing and reverse-proxy header rotation vectors.
Axo Solaman Personal Platform
Engineered with Next.js 15, React 19, TypeScript, and Tailwind CSS. Deployed on Cloudflare OpenNext edge workers with instant global caching and an automated AI publishing pipeline.
July Uprising Youth Archive & Digital Wall
A cultural and historical preservation initiative archiving the student resistance in Bangladesh. Preserves street murals, poems, martyr memoirs, and primary accounts to ensure the spirit of justice is never erased.
Youth Tech & Cyber Literacy Curriculum
An academic and community outreach project providing free cybersecurity and web development learning paths in Bengali to students without access to expensive bootcamps.
Responsible Disclosure Profiles
Recognitions & Halls of Fame
Responsible vulnerability disclosures submitted to international organizations: