neeshant

neeshant Automating Web Security Audits: A Deep Dive into Vanguard Web Scanner Automating Web Security Audits: A Deep Dive into Vanguard Web Scanner Discover Vanguard—a modular command-line vulnerability scanner and crawling tool designed to actively audit HTTP headers, test endpoints, and detect XSS and SQL injection vulnerabilities. Python 3.8+ Ethical Hacking Kali Linux MIT License Introduction Web application security has transitioned from an periodic compliance checkbox to a continuous, core requirement in modern software development. As web platforms grow more complex, they ingest, process, and store massive amounts of sensitive user data. Consequently, they remain the primary target for malicious threat actors. Traditional approaches to securing these platforms—such as hiring external penetration testing team...

By neeshant    Understanding how a web platform works under the hood—and more importantly, how to secure it—is crucial for any developer. Today, we are breaking down the architecture of the TraceX Console. This post will explain how data is retrieved, how a security bypass occurred, the associated risks, and the exact steps to secure the website against future attacks. *(Note: All sensitive tokens, URLs, and database connection strings have been partially masked to maintain system security while keeping the technical layout realistic.)* ## 1. The Architectural Layout The system is divided into four main components that communicate with each other:  * **Frontend Screen (TUI):** Hosted on [https://tracexnumber.web.app/](https://tracexnumber.web.app/), this is the main interface where users execute searches and interact with identity caches. It features decoupled, lightweight styling using a high-performance terminal emulator theme that runs entirely client-side without heav...

Building a DIY Sci-Fi HUD Voice Assistant By neeshant  A Deep Dive into the J.A.R.V.I.S. (Desi Jarvis) Core Offline Workstation Controller Introduction: The Evolution of Local Voice Systems Voice assistant technology has matured rapidly over the past decade. Virtual assistants like Apple's Siri, Amazon's Alexa, and Google Assistant have integrated themselves deeply into our smartphones, smart speakers, and home appliances. While these commercial solutions are capable, they are built on a highly centralized paradigm: they rely on constant internet connectivity to stream voice recordings to remote cloud servers. Once in the cloud, these voice snippets undergo resource-intensive automatic speech recognition (ASR) and natural language processing (NLP) before sending commands back to the client device. This architectural flow creates major bottlenecks, including perceptible latency, reliance on internet availability, and recurring API subscription costs. ...

neeshant Building a Strategic Study Ops Platform: A Deep Dive into Jeeplan2027 Secure, local-first progress tracking and intelligent scheduling for one of the world's most competitive exams. 🛡️ Cybersecurity Portfolio 🟢 Status: Active ⚙️ Python, JS, Kotlin 📖 1. Introduction: The High-Stakes World of JEE Prep The Joint Entrance Examination (JEE) in India is globally recognized as one of the most grueling academic challenges. Every year, over a million candidates compete for a fraction of a percent of seats in the prestigious Indian Institutes of Technology (IITs). The syllabus spans two intensive years of Physics, Chemistry, and Mathematics (equivalent to Classes 11 and 12). Success does not merely demand intelligence; it requires impeccable ...

neeshant Open Source Release Unleashing AegisEye: AI-Powered Digital Forensics & OSINT Triage Bridging the gap between automated incident response and human-auditable digital forensics using a secure Custom Model Context Protocol (MCP) server.  by neeshant    Introduction In the modern cybersecurity landscape, threat mitigation is a race against time. Offensive AI tools, automated vulnerability scanners, and automated script suites can execute complex multi-stage attacks, elevate privileges, and establish persistent backdoors in a matter of seconds. When a system is compromised, security teams face the arduous task of manual incident response—sorting through EXIF metadata, verifying SSL certificates, performing domain WHOIS query searches, checking phone registries, and auditing suspicious system files. Historically, these tasks required human analysts to context-switch between doze...