Final-year B.Tech · Open to SDE & Security roles

I build products, then I
try to break them
before someone else does.

Hi, I'm Mohit Sharma — a developer and security engineer from Faridabad. I build complete, working software and know how to find its weak spots. Both skills. One person.

~/mohit — status check
[BUILD] Full-stack apps — shipped and running in production
[LIVE] Self-Heal-AI — monitors servers & auto-fixes issues 24/7
[SEC] Bug-hunting pipeline: recon → exploit → professional report
[OK] AI tools with real users — not just demos on localhost
[INFO] Faridabad, India · available for remote & on-site roles
What I actually do

No jargon — plain English

Not sure what "full-stack" or "security engineer" means? Here's the honest answer.

🛠️

I build websites & apps

From the button you click to the database storing your data — I design and build the whole thing. If you can describe what you need, I can ship it.

Tech used: React, Python, Supabase, Tailwind CSS
🔒

I find security holes

I test software the way a hacker would — looking for unlocked doors. I find the problems before someone with bad intentions does, and document how to fix them.

Tech used: Penetration testing, vulnerability scanning, log analysis
🤖

I add AI where it helps

Not AI for the sake of it. I build AI features that solve real problems — servers that fix themselves, tools that work for actual users, not just in demos.

Tech used: GPT-4o, OCR pipelines, LLM tooling
Meet me first

Hear it straight from me

Skip the reading — watch a quick intro where I walk you through who I am, what I've built, and what I'm looking for. Two minutes, no fluff.

  • ▸ Who I am and what I work on
  • ▸ Projects I'm most proud of
  • ▸ What kind of role I'm looking for
Visit my YouTube channel ↗
// selected work

What I've shipped

Real projects with real repos. Every link goes to working code — not slides, not mockups.

Self-Heal-AI

Security · Automation · AI

🧠 A robot that watches your server 24/7 — and fixes problems on its own before you even notice them.

Technical breakdown Watches server logs for anomalies, auto-blocks malicious IPs via firewall rules, restarts crashed services, and alerts over Telegram/Discord. Closes the gap between "detected" and "fixed" — no human needed.
Python Log Analysis AI Anomaly Detection Telegram/Discord Bot

Vulnerability Scanner

Offensive Security

🔍 A tool that automatically checks a website for security holes — the way a professional hacker would.

Technical breakdown Identifies misconfigurations, exposed endpoints, and known vulnerability signatures, then outputs a professional disclosure-style report ready to hand off to a developer to fix.
Python Vulnerability Detection Structured Reporting

Exbow-Offensive

Offensive Security Research

🎯 A full pipeline that automates the entire ethical hacking process — from finding information to writing the final report.

Technical breakdown Recon-to-report automation — reconnaissance, vulnerability analysis, exploitation testing (with permission), and structured output for professional write-ups and CTF competitions.
Python Recon Automation CTF Tooling Reporting

ExamCraft

AI Tool · Student Productivity

📄 Upload your question paper → get a perfectly formatted answer sheet, scaled to exact marks, with maths worked out step by step.

Technical breakdown Uses OCR (Tesseract.js) to read the question paper, GPT-4o-mini to generate marks-aware responses, and jsPDF to export a print-ready A4 PDF. Single-file app — runs entirely in the browser, no backend.
Tailwind CSS Tesseract.js (OCR) jsPDF GPT-4o-mini

Quiz-Master Pro

Real-Time · Multiplayer

🏆 A live multiplayer quiz — compete with friends, see who's winning in real time, and get an AI explanation when you get something wrong.

Technical breakdown Real-time leaderboard over Supabase Realtime subscriptions. AI-generated explanations for wrong answers. Gamified badge system to keep users coming back.
React Supabase Realtime AI Explanations
// content

I also make videos

Beyond the code, I share what I learn — security concepts, dev tips, and project breakdowns explained so anyone can follow.

▶️

Mohit Sharma on YouTube

Walkthroughs, tutorials, and honest breakdowns of things I'm building or learning. No fluff — real content from a developer figuring things out in the open.

Security concepts Project walkthroughs Dev tips CTF writeups
▶ Visit my channel
// writeups

How I got in

Detailed accounts of how I found vulnerabilities — written like a real security disclosure, showing my full thought process.

Vulnerability Scanner — Findings Writeup

Disclosure-style report

🧩 Step-by-step: how I found the weak point, proved it was real, exploited it (with permission), and documented the fix.

What's inside Full breakdown of the discovery method, proof-of-concept exploit, impact assessment, and remediation steps — written the way a real security disclosure reads.
Read the writeup →
// classified · clearance required

Why me?

Most portfolios just say the candidate is great. This one decrypts the actual reasons.

FILE: why-me.dossier [DECRYPTING ON VIEW]
// mindset
// method
// standard
// proof
// stack

What I work with

Tools and technologies I use on real projects — not just things I've Googled once.

💻

Languages

  • Python — scripting, automation, security tools
  • JavaScript — frontend & browser tooling
  • C — systems-level understanding
🌐

Web & Tools

  • React — interactive interfaces
  • Tailwind CSS — modern, fast styling
  • Supabase — database & real-time backend
  • Git / GitHub — version control
🔐

Security

  • Recon & enumeration automation
  • Vulnerability scanning & disclosure reports
  • Log-based anomaly detection
  • CTF-style exploitation practice
🤖

AI / ML Applied

  • GPT-4o family — practical LLM integration
  • OCR & document processing pipelines
  • AI features built for real users
// education

Background

🎓

B.Tech, Computer Engineering

JC Bose University of Science & Technology (YMCA), Faridabad
Final year · 2024 – 2028