Skip to content
View anubhavmohandas's full-sized avatar
🏠
Working from home
🏠
Working from home

Highlights

  • Pro

Block or report anubhavmohandas

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
anubhavmohandas/README.md
Typing SVG

Portfolio LinkedIn Stack Overflow Profile Views


┌─────────────────────────────────────────────────────────────────────────┐
│  I build autonomous systems.                                            │
│  Security agents, OSINT pipelines, and local AI that investigate,       │
│  decide, and act — without supervision.                                 │
└─────────────────────────────────────────────────────────────────────────┘

> whoami

class AnubhavMohandas:
    location      = "Kerala, India"
    active_since  = 2019
    current_focus = ["Autonomous Security Agents", "OSINT Pipelines", "Local AI Systems"]
    expertise     = {
        "autonomous_ai":  ["Security Agents", "OSINT Automation", "Local LLMs"],
        "forensics":      ["Memory Analysis", "Disk & Network Forensics", "Cyber Crime Investigation"],
        "offensive":      ["Penetration Testing", "Payload Generation", "Exploit Research"],
        "defensive":      ["SIEM Engineering", "Kernel-level Threat Detection", "Honeypots"],
        "intelligence":   ["OSINT", "Threat Intelligence", "Reconnaissance", "Attribution"],
    }
    currently_building = "Systems that investigate, decide, and act — without supervision."

> ls active_systems/

Click any system to expand ↓

◈ SAGE — Security Analysis & Graph Engine  

CVE drops. SAGE wakes up.

Maps your entire transitive dependency graph using tree-sitter + NetworkX, finds every function in the blast radius, calls Claude for a targeted patch, runs CVE-specific exploit tests to verify it, then opens a GitHub PR automatically.

You review and merge. That's it.

tree-sitter · NetworkX · Claude API · GitHub API



◈ NYX — Personal AI Assistant  

Fully local. No API keys phoning home. Voice-activated, multi-model fallback.

Speaks Hindi / English / Hinglish / Malayalam — because your AI should understand how you actually think.

The anti-cloud AI assistant.

Local LLMs · Whisper · Python · Multi-model fallback



◈ MIDAS — Market Intelligence, Discovery & Autonomous SaaS-builder  

Goes to sleep. Wakes you up with a live product.

Mines Reddit / Twitter / ProductHunt / App Store for pain signals → validates willingness-to-pay → scaffolds FastAPI + Supabase + Stripe → ships to Vercel → posts to ProductHunt.

Overnight. Autonomous. No human in the loop.

FastAPI · Supabase · Stripe · Vercel · Python



◈ CyberTrace — OSINT Intelligence Platform  

One identifier in. Everything out.

Input Output
Email Breach history, associated accounts
BTC Address Wallet graph, transaction trail
Phone Carrier, owner, linked profiles
IP Geolocation, Shodan exposure
GSTIN Full business intelligence

30+ sources across surface, deep, and dark web — queried in parallel, results merged and ranked.

Python · Shodan API · 30+ OSINT sources · Parallel querying



◈ HERMES — Hybrid Engine for Research, Memory, Execution & Synthesis  

54 open-source patterns. 20 modules. 5 layers. One install.

Built so Claude can do everything without switching contexts — research, write, remember, execute, synthesize.

Python · Claude API · MCP · Custom memory layer



> cat shipped.txt

Tool What it actually does
🔐 GHOST AES-256-GCM autofill extension. Reverse-engineered IRCTC's Angular monolith for Tatkal booking. No public API used.
📄 Nyxine Resume builder that never touches a server. JD keyword scoring, ATS gap analysis, AI coaching — all in-browser.
🔍 WhoisUser Username recon across 100+ platforms. One query.
💣 Secure Gen Payload framework — 15+ types, WAF bypass, DB-specific vectors. Ethical hacking only.
🛡️ SIEM Exploit Detector Real-time APT and kernel-level exploit detection.
🕵️ Digital Forensics Toolkit All-in-one investigation suite for cyber crime cases.
📊 Enhanced CVSS Calculator Because the standard one isn't enough for real triage.
🕸️ Web Honeypot Attacker behavior capture and analysis in real-time.
📋 Log Analyzer Advanced threat detection engine.

> cat stack.cfg

Languages & Frameworks

Python JavaScript React Node.js FastAPI PHP

AI & Autonomous Systems

Claude Supabase MongoDB Vercel Stripe

Security Arsenal

Kali Wireshark Burp Suite Metasploit Nmap

Forensics & OS

Autopsy CAINE BlackArch Ubuntu


> tail -f analytics.log



Activity Graph


> ./connect.sh

$ curl -X GET https://anubhavmohandas.netlify.app
→ Security-first. Autonomous. Zero toolchain overhead.

Portfolio LinkedIn Stack Overflow


┌──────────────────────────────────────────────────────────────────────┐
│  "Offense informs defense. Know your adversary."                     │
│                                                                      │
│  Open for collaboration on security research & autonomous AI         │
│  With greater power comes greater responsibility                     │
└──────────────────────────────────────────────────────────────────────┘

security · forensics · autonomous systems · 2019 → now

Pinned Loading

  1. Aegis Aegis Public

    Aegis watches your machine in the background — new processes, USB devices, startup persistence, and your Desktop/Downloads/Documents folders — and explains what it sees in plain English using Claud…

    Python 1

  2. SAGE SAGE Public

    SAGE - An autonomous AI-assisted application security platform that converts repositories into interactive knowledge graphs, correlates NVD CVEs with code-level reachability, performs exploitabilit…

    HTML 1

  3. GHOST GHOST Public

    A browser extension that silently fills any form with your saved profiles — personal info, credentials, custom fields, and security payloads.

    JavaScript

  4. siem-kernel-exploit-detection siem-kernel-exploit-detection Public

    This project implements a comprehensive Security Information and Event Management (SIEM) system designed to detect Linux kernel exploit attempts and post-exploitation activities in real-time.

    Shell

  5. Enhanced-CVSS-Calculator Enhanced-CVSS-Calculator Public

    The Common Vulnerability Scoring System (CVSS v3.1) is a global standard used to measure the severity of security vulnerabilities on a scale from 0 (no risk) to 10 (critical risk).

    CSS

  6. recon_scanner recon_scanner Public

    RECON Scanner is a powerful, cross-platform reconnaissance tool designed for security professionals. It supports domain and network analysis, DNS and port scanning, subdomain discovery, WHOIS looku…

    Python 4 1