Engineering Sandbox

Security Tools & Utilities

A collection of high-performance utilities and demonstrations showcasing the junction of software engineering and security logic.

_Web Security Auditor

Deep analysis for modern web architectures. Audit JWTs, CSPs, and HTTP headers in real-time.

JWTINSPECT_LAB

Client-side processing only

Local sandbox environment

Analysis Results

Awaiting input for audit...

Engineering Intelligence Sandbox // Secure Code Review Mode

_Secret Scanner

Deep entropy and pattern analysis for credentials. Prevent hardcoded secrets from reaching production.

SEC_SCAN_BUFFER // CODE_AUDIT
Live Analysis
Entropy: 0.00

Audit Signals

No secrets exposed

Shannon Entropy Engine Active

12+ Signature Groups Active

Built for: Gitleaks / TruffleHog Interop

_Header Auditor

Verify the fundamental security headers of any website. Powered by serverless audit logic.

_Packet Inspector

Deep protocol analysis demonstration. Observe how a WAF or secure-handler intercepts malformed traffic.

wireshark_capture_01.pcap
000045 00 00 3c 1c 46 40 00 40 06 b1 e6 ac 10 0a 01
0010ac 10 0a 02 d4 31 00 50 00 00 00 00 00 00 00 00
0020a0 02 72 10 32 b1 00 00 02 04 05 b4 04 02 08 0a
003041 41 41 41 41 41 41 41

Awaiting target selection...

_Wasm Speedup Lab

Performance engineering demonstration. Parsing 5.2MB of security logs using JS vs WebAssembly.

Task: Full Scan for IOCs (Indicators of Compromise)


_Interactive Kill-Chain

Visualize how threats progress and where my guardrails intercept them.

STATUS: Detected

Threat Analysis

Public surface area scan & domain enumeration.

Attacker identifies public-facing assets, subdomains, and potential technology stacks.

Defensive Strategy

Attack Surface Management (ASM) & Shadow IT Discovery.

Resilience 100%

_Detection Engineering Lab

Interact with a safe “Honeytoken” to see a real-time reactive security event.

Secure Object Store

This component contains a simulated “config.ini”. Accessing it will trigger our detection pipeline.

System Policy: Log all Read-Only Access

Live Security Feed

Awaiting interactive input...

Monitoring Active

_Artifact Deep-Dive

BASE: 0x0040D040
ANALYSIS_ACTIVE
OFFSETHEXADECIMAL PAYLOAD DATA
000000007f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00
0000001002 00 3e 00 01 00 00 00 40 d0 40 00 00 00 00 00
0000002040 00 00 00 00 00 00 00 bc 10 00 00 00 00 00 00
0000003000 00 00 00 40 00 38 00 09 00 40 00 1f 00 1e 00
00000040eb 0c 13 41 41 41 41 41 41 41 41 41 41 41 41 41
0000005041 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41
00000060bf ad 10 40 c3 90 90 90 90 90 90 90 90 90 90 90

Framework Mapping

Visualizing my defensive proficiency against the **MITRE ATT&CK®** knowledge base.

Active Specialization

Initial Access

Mastery Index

95%

Technical Coverage
  • Drive-by Compromise
  • Exploit Public-Facing App
  • Valid Accounts
Live Evidence
API Pentest Case Study
OAuth 2.0 Security Audit

Experience the CLI

I've built a professional Terminal CLI for this portfolio. You can explore my skills, projects, and security pulse directly from your terminal.

$node scripts/cli.js

© 2026 Anilkumar · Product Security Engineer

Integrity CheckedEncrypted Session