Explore Projects

This project proposes building jws diag, a read only diagnostic CLI for JBoss Web Server that helps operators and SREs to inspect runtime and configuration state more easily. The tool will provide concise installation and deployment summaries, effective connector TLS and proxy configuration reporting, validation checks for common misconfigurations, structured JSON output, and realistic test coverage for troubleshooting and automation use cases.

To identify possible relations between gene variants, phenotypes, and diseases - an ideal way would be a multi-model approach that involves: • Supervised learning methods to discover diseases associated with combinations of gene variants and clinical features. • Also unsupervised learning methods like clustering to understand the underlying patterns among diseases that went unnoticed before. This could be a strong evidence-based approach for clinical treatments.

The objective is to add an Export/Import framework in Music Blocks (v4) for exporting/importing projects and multimedia like canvas drawings, music and animations of the canvas art and music.

<p>The CC Search website is a tool that is available to everyone on the internet, but its accessibility is quite low. The reasons for its low accessibility are varied in nature which affects different sections of people. Due to this reduced accessibility, it is not possible for everyone to completely utilize all the features that cc search provides and thus it becomes imperative to fix this issue. The final deliverable of this project will be a highly accessible website which everyone on the web can access from any device or region and which fully accommodates every visitor to enable them to utilize the search to its fullest.</p>

<p>The project's aim is to develop a chatbot that can help people create spec documents without knowing the specification.To get started with, the bot will consume the spec, JSON schema and serves the user as an expert. So based on a set of questions and answers it will generate an AsyncApi spec document according to the use cases. The bot will be able to build its knowledge really fast, thanks to Wit.AI NLP functionality. We also plan to build an integration functionality which will allow the bot to be available either to the CLI or UI by using the integration functionality.</p>

The Global Alliance for Genomics and Health (GA4GH) defines the Tool Registry Service (TRS) specification for the discovering and accessing research software, packaged as either “tools” (command-line executables) or “workflows” (descriptors of DAG-based analysis pipelines, typically written in specialized DSLs). In this project, I will aim to create components that will help discovering these tools and workflows. This will be done using Svelte framework and Typescript.

<p>The solution will act as a BROKER that manages subscriptions for update notifications for each deployment subscribed by system administrators</p> <p>System Diagram: <a href="https://drive.google.com/file/d/1risThs_kBWBYJjvepytUaDIQDxpL2w3T/view?usp=sharing" target="_blank">https://drive.google.com/file/d/1risThs_kBWBYJjvepytUaDIQDxpL2w3T/view?usp=sharing</a></p>

<p>This project aims to make Purr Data run in a web browser by adding a WebAssembly target and HTML5 GUI framework.</p> <p>Purr Data a.k.a. Pd-l2ork 2 is an improved version of Miller Puckette’s Pd.</p> <p>Pd (Pure Data) is a graphical data-flow programming environment which is geared towards real-time interactive computer music and multimedia applications. It is a full-featured open-source alternative to its commercial sibling, Cycling74’s Max.</p> <p>Purr Data serves the same purpose, but offers a new and much improved graphical user interface and includes many 3rd party plug-ins. Like Pd, it runs on Linux, macOS and Windows, and is open-source throughout.</p> <p>The goal of this project is to make the Purr Data run in a web browser so it can be more accessible to users and make their work more easily shared with other people.</p>

<p>Develop a service(set of classes within the project) for searching and sorting to output advanced nested results by prioritising tags and power tags which fulfils the general search requirement of the users and detailed analysed searching of admins and directors in the system.</p>

The Juice Shop CTF Tool, currently made with vanilla JavaScript, needs to be upgraded to TypeScript to align with the main project for easier maintenance. Also, its code quality should be improved by applying Juice Shop's ESLint standards. The project's tests coverage and relevance should also be reviewed and strengthened where necessary . Furthermore, several other sub-projects like Juicy Statistics, Juicy Coupon Bot , Juicy Chat Bot should also be renovated

The Param Digger add-on is a parameter discovery tool that can be used to find hidden or unlinked parameters which can be potentially used for finding web cache poisoning vulnerabilities. This can include HTTP headers, cookies or URL parameters. This is the equivalent of the burp param miner extension.

FinBot CTF has no defensive layer, players can exploit agentic AI vulnerabilities but can't learn to stop them. This project fixes that gap. I'll build a GuardrailEngine that intercepts agent actions before execution, convert 4 existing challenges into paired red/blue scenarios with OWASP Agentic Top 10 and MITRE ATLAS mappings, and develop a stateful MaliciousToolServer that simulates real supply-chain attacks. Deliverables: GuardrailEngine with 4 built-in policies, defense-enabled scenarios for Puppet Master, Invoice Trust Override, Fine Print, and RCE via SystemUtils, two new supply-chain challenges (Shadow Protocol + Trojan Invoice), and full CI/CD with contributor documentation. The result is a complete attack-and-defend environment, the only hands-on platform purpose-built for agentic AI security.

<p>Building a Standalone Scanner for RAF to detect OWASP TOP 10 Vulnerabilities and building a plugin for IDE’s</p>

The OWASP Nest API and Schema Development project aims to enhance OWASP Nest API infrastructure by migrating to Django Ninja for optimized REST API performance, replacing Graphene with Strawberry GraphQL, and implementing structured API key management for secure authentication. Additionally, it introduces YAML-based JSON schemas to standardize metadata for OWASP projects, chapters, and committees, ensuring consistency across repositories. The project focuses on performance improvements through Redis caching and rate limiting, automated schema validation using GitHub Actions, and SDK generation in Python, Go, and TypeScript for easier integrations. Comprehensive API documentation will be developed using OpenAPI and Swagger UI, and 80%+ test coverage with Pytest will ensure stability. By implementing these enhancements, the project will improve security, maintainability, and developer experience, fostering a structured and efficient approach to OWASP Nest API and metadata management.

Build WebGL spatial telemetry panels in Grafana for visualizing physical data center rack thermal sensor metrics.

Flotta Operator is a Kubernetes operator used to manage the workloads of the IoT edge devices via Kubernetes API. Flotta workloads running on low-resource devices like RaspberryPI, Nvidia Jetson Boards, etc. These devices can be located anywhere, under so many circumstances which introduces many problems that affect the performance of the network. The current situation is there is no example project for using Flotta which is making a barrier to adopting the Flotta Project. The project goals are twofold: Edge Example Application 1. Implementation of workload application that would run on a bunch of Flotta devices collecting video streams/pictures from webcam and/or getting other data from sensors. 2. Implementation of WebApp that runs in the Flotta cluster that presents the results of aggregated data from devices in a nice UI to help users get some insights from data. Sense the Internet Investigating the Internet network topology and measuring the performance of the network using devices managed by Flotta. This will be done by performing large-scale network topology discovery efficiently ( both at the IP level and at the router level), sensing the quality of the network using active probing tools like traceroute, ping ..etc, and presenting this data in clear graphs with filters on the WebApp that running in the cluster to help project users making better decisions. Deliverables Implement the workload app that is running on Flotta devices, with capabilities of 1. Reading & collecting from webcams and sensors. 2. Performing a large-scale network topology discovery. 3. Sharing collected data to the Flotta cluster. Implement a Web App in the cluster, with capabilities of 1. Present aggregated data from sensors and webcams in a nice format. 2. Present devices networks topology in graphs. 3. Present filters and Frontend functionalities to help users read collected data. Write Documentation for the Edge Example App.

The goal of this project is to implement a callback mechanism for task status updates in TES, which will send requests from the server to the client whenever a task’s status changes, thus eliminating the need for expensive polling. I plan to remove the need of excessve polling by implementing a callback listener microservice which will be deployed as a sidecar with the client. Now, the client can ask this listener instead of making network calls to the server continuouslly.

<p>Performance testing is to analyze results and determine where the app performance can be improved and also improve users experience</p>

<p>In this project two new types of coding challenges for the vulnerable code snippets will be added, one for identifying the vulnerable lines in the vulnerable code snippet and another to identify the correct fix for the vulnerability.</p>

<p>This project is based on the idea of the simplest form of micro-frontends that we can provide our users with our services like Cloud Registry, TRS, DRS, etc. As TRS/DRS backend services are still in development for GSoC this project is mainly focused on implementing open source clients for the Cloud Registry specifications as Web Components these Components can also be used later for Tool Registry Service (TRS) and Data Repository Service (DRS) specifications by adding the more functionality to these components. This will provide the Microservice~Micro-Frontend architecture to the organization.</p>

This project aims to increase editorial coverage to 70-80% by automating creation with AI. Admins can generate editorials in bulk from the problem list, while authors can trigger generation during problem creation. The system validates editorials by testing solutions and automatically fixes issues found during validation.

<p>The scalable , extendable backend services stress tester.</p>

BLT website lags behind in modern design as compared to other websites. This proposal aims to enhance the current design of BLT website by completely redesigning certain parts of the website. Additionally, the file structure for the project can be improved as many of the files can be removed as we migrate to a new design. Talking about the backend, we have many features that can be implemented in the backend, e.g. currently BLT is on the verge of suggesting tip amount based on CVE number. The end goal is to deliver a complete redesign of the website with a modern feel and look with strong backend features. I have attached figma links to the new designs in the Proposal PDF.