Skip to content
View n3erajan's full-sized avatar

Block or report n3erajan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
n3erajan/README.md

n3erajan

Security tooling and backend infrastructure.

site linkedin email


python, javascript, react, node, postgresql, mongodb, redis, docker, linux, bash

Projects

A dynamic application security testing platform for authorized web app assessments. It crawls the target, runs bounded checks, and verifies candidates before recording them, using Playwright to reach client-side routes and forms in single-page apps.

Every finding keeps its request and response evidence plus an evidence grade. A local Ollama worker reads that evidence to explain the finding, assess exploitability and business impact, suggest remediation, and flag likely false positives, all without the evidence leaving the deployment. Teams assign findings, comment, track fixes, request re-verification, and export a PDF report from the same workspace.

Python FastAPI Playwright React MongoDB Redis

A self-hosted email stack with its own SMTP server rather than a third-party sending API. Handles DNS integration, multi-domain routing, retries, and async processing, with delivery pushed to the client over SSE.

Node React MongoDB Redis Docker

A DNS server for home labs and dev environments. Custom records, domain blocking, response caching, and upstream resolution for anything it does not answer itself.

Node MongoDB Redis

Machines documented from reconnaissance through root, covering the enumeration, the failed attempts, and the path that worked.

Markdown

Activity

contribution activity

Pinned Loading

  1. SentryStrike SentryStrike Public

    Evidence-driven DAST platform for authorized web application security testing, with browser-assisted crawling, vulnerability verification, multi-tenant triage, AI analysis, and PDF reporting.

    Python 2 1

  2. email-system email-system Public

    Complete email infrastructure with custom SMTP server, DNS integration, multi-domain routing, real-time delivery via SSE, retry mechanisms, and asynchronous processing. Built with Node.js, React, M…

    JavaScript

  3. dns-server dns-server Public

    A High-performance DNS server with custom record handling, domain blocking, caching and upstream resolution. Built on Node.js, MongoDB and Redis, perfect for home labs and dev environments where sp…

    JavaScript

  4. ctf-writeups ctf-writeups Public

    CTF writeups covering my full methodology - recon to root.