Zain Khalil Khan

Autonomous AI-powered penetration testing assistant that converts raw reconnaissance data into structured, actionable threat intelligence in real time. Ingests outputs from Nmap and Gobuster, performs live OSINT enrichment, and automatically maps potential vulnerabilities, misconfigurations, and attack paths.

AI-powered interview preparation platform that analyzes resumes to generate personalized interview questions, simulates realistic timed interviews, and provides multi-dimensional performance feedback with AI-generated improvement suggestions.

AI-powered troubleshooting tool using text, images, and live camera input to diagnose hardware issues like loose cables, damaged components, overheating, and blinking error patterns, then delivers step-by-step repair guidance instantly.

High-performance Neural Operating System with multimodal AI, real-time voice interaction, autonomous tool use for alarms and tasks, live data grounding, and a luxury-grade glassmorphic React interface with Neural Sphere animation.

AI platform that analyzes, creates, and secures legal and financial documents. Highlights contract risks, generates agreements with built-in security checks, and auto-fills US tax forms including nonresident alien forms.

Live threat-intelligence visualization that plots inbound attack origins on a world map, streams a feed of enriched IOCs, and ranks the most active malicious source regions.

Paste an AWS IAM policy and CloudGuard audits it for wildcard actions, privilege-escalation paths, public exposure, and missing conditions, scoring least-privilege compliance.

Real-time SOC console that ingests alerts, correlates them against MITRE ATT&CK techniques, scores severity, and drives an analyst triage queue with acknowledge/escalate workflows.

Autonomous AI-powered penetration testing assistant that converts raw reconnaissance data into structured, actionable threat intelligence in real time. Ingests outputs from Nmap and Gobuster, performs live OSINT enrichment, and automatically maps potential vulnerabilities, misconfigurations, and attack paths.

Open-source secure file storage prototype with client-side AES encryption, PBKDF2-derived per-user keys, role-based access control, audit logging, S3 presigned URLs, and an admin dashboard.

Python-based MFA system combining password verification with OTP via email/SMS and time-based token generation. Includes secure password hashing and protection against brute force and credential stuffing.

Snort-based IDS deployed to monitor and analyze simulated network traffic, identifying malicious patterns using Wireshark for traffic analysis and Python for automation and alert handling.

Investigative study on DDoS attacks targeting financial institutions. Analyzed TTPs, modeled attack scenarios with Wireshark and Snort, and developed defensive frameworks including rate-limiting and cloud-based DDoS protection.

Python tool that evaluates password security by calculating entropy and using regex to detect common patterns, character repetition, and dictionary words, providing actionable feedback for stronger credentials.

Real-time SOC console that ingests alerts, correlates them against MITRE ATT&CK techniques, scores severity, and drives an analyst triage queue with acknowledge/escalate workflows.

Paste a raw email and PhishGuard inspects SPF/DKIM alignment, sender spoofing, link domains, and social-engineering language to produce a weighted phishing verdict.

Lightweight identity provider that signs, decodes, and verifies JSON Web Tokens with HMAC-SHA256, demonstrating tamper detection and expiry handling end to end.

Simulated reconnaissance tool that sweeps a target host, fingerprints open services and versions, and flags risky exposed ports the way Nmap would in a live engagement.

Paste an AWS IAM policy and CloudGuard audits it for wildcard actions, privilege-escalation paths, public exposure, and missing conditions, scoring least-privilege compliance.

Streaming log analytics that establishes a rolling baseline, computes z-scores on event rates, and surfaces statistical anomalies in real time before they become incidents.

Live threat-intelligence visualization that plots inbound attack origins on a world map, streams a feed of enriched IOCs, and ranks the most active malicious source regions.

Educational cryptanalysis sandbox that identifies a hash's likely algorithm and runs a real dictionary attack with SHA-256 in-browser to illustrate why weak passwords fall fast.

Shift-left security gate that scans a repository on push for hardcoded secrets, vulnerable dependencies, and injection patterns, then blocks or passes the build with a findings report.

Policy-based access broker that evaluates every request against device posture, geo, MFA status, and resource sensitivity to make an explainable allow, step-up, or deny decision.

10 min read

8 min read

12 min read

7 min read

11 min read

13 min read

11 min read

8 min read

zainkhalilkhan1@gmail.com

linkedin.com/in/zainkhalilkhan

github.com/zkkhan01

vsco.co/zkkhan-