Skip to content
View tracolerd's full-sized avatar
🎯
Focusing
🎯
Focusing
383 followers · 33 following

Achievements

Achievement: Pair Extraordinairex3Achievement: Pull Sharkx3Achievement: Galaxy Brainx2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pair Extraordinairex3Achievement: Pull Sharkx3Achievement: Galaxy Brainx2Achievement: YOLOAchievement: Quickdraw

Highlights

  • Pro

Block or report tracolerd

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tracolerd/README.md
Header Banner

A Full Stack Developer | Building Security Tools, Automation Scripts & AI-Integrated Apps


Bangladesh GitHub rank by followers and activity



Divider

About Me

"I leverage AI tools for rapid development and maintain a strong focus on bug-free software and efficient workflows."

  • Education: B.Sc. in CSE @ East West University (Expected 2028)
  • Major: Intelligent Systems & Data Science
  • Focus Areas: Software Quality Assurance, Cloud Security, AI-Driven Development
  • Location: Dhaka, Bangladesh
  • Mission: Building bug-free, secure & intelligent software systems
  • Academic Record: HSC (GPA 5.00) | SSC (GPA 5.00) - Science Background
  • Fun Fact: I debug code faster with AI than most people write it!
Tech Enthusiast Coding GIF

Divider

Tech Stack

Languages Python Java Go C C++ C# Kotlin PHP JavaScript TypeScript SQL
Frontend and Mobile HTML5 CSS3 Tailwind CSS Bootstrap React.js Vue.js Angular React Native Android SDK Redux Toolkit Context API Zustand Three.js Framer Motion NPM Yarn Vite Webpack
AI, LLM and Automation OpenAI API ChatGPT Codex Anthropic Claude Gemini Cursor Antigravity Eigent Qwen Code Kimi Code Hugging Face LangChain LlamaIndex CrewAI AutoGen
Databases and APIs PostgreSQL MySQL MongoDB Firebase Redis Pinecone ChromaDB Milvus REST GraphQL gRPC JWT OAuth 2.0 CORS Twilio
SQA and Test Automation Selenium Cypress Playwright Postman Jira
Cybersecurity Kali Linux Parrot OS Burp Suite OWASP ZAP Nmap Wireshark Metasploit Splunk LogRhythm Hashcat
Version Control, Deployment, MLOps Git GitHub GitLab Vercel Render Railway Heroku Netlify MLflow Weights and Biases BentoML

Divider

Expertise

Area Skills
Software Engineering OOP, Data Structures and Algorithms, SOLID, Clean Code, Design Patterns, Memory Management
Systems and Architecture Microservices, Event-Driven Architecture, HTTP/HTTPS, WebSockets, Multithreading, Async and Concurrency, Race-Condition Handling
Data and API Engineering Database Indexing and Sharding, Vector Search and RAG Pipelines, REST / GraphQL / gRPC API Design
AI and LLM Engineering Prompt Engineering (Few-Shot, CoT, ReAct), PEFT / LoRA / QLoRA Fine-Tuning, AI-Assisted Development, Basic MLOps
Application and AI Security OWASP Top 10, AI Guardrails, Prompt-Injection Defense, Data-Leakage Prevention
Software Quality Assurance Test Case and Test Plan Design; Functional, Regression, Smoke, API, Exploratory and Security Testing; Bug Life Cycle; SDLC, STLC, Agile/Scrum, TDD, CI/CD
Cybersecurity Security Audits, Vulnerability Assessment, Penetration Testing, CTF Competitions
Collaboration and Delivery Git Branching, Merging and Pull-Request Workflows

Divider

Projects  (click to expand / collapse)

Cybersecurity and Defensive Engineering

ThreatLens AI  |  Multi-signal scanner for suspicious URLs
Problem A malicious link is hard to judge by eye. This gives users a quick, explainable second opinion on a page before they trust it, combining rule-based, threat-intelligence and AI signals.
Features
  • One-click scan of the active browser tab through a Manifest V3 Chrome extension
  • Lexical URL analysis: domain structure, IP presence, typosquatting keywords and URL length
  • VirusTotal lookup for domains already reported as malicious
  • AI contextual analysis that returns a 0 to 100 threat score with reasons
  • SAFE, SUSPICIOUS or DANGEROUS verdict in a dark popup dashboard
Stack Python FastAPI Uvicorn Chrome Extension (MV3) JavaScript VirusTotal API OpenAI API
Status Educational prototype for local use. Results are a triage signal for human review.
Links Repository

Phishing Email Classifier  |  Machine-learning pipeline for phishing email detection
Problem No single indicator separates phishing from legitimate mail: newsletters carry many links and genuine emails carry attachments. The classifier weighs message text together with security signals instead of trusting one rule.
Features
  • Classifies an email as PHISHING or LEGITIMATE with a probability and a HIGH, MEDIUM or LOW confidence label
  • TF-IDF text features (unigrams and bigrams) combined with URL count, attachment and SPF-failure signals
  • Custom scikit-learn transformers in one serialized pipeline, so training and inference share identical preprocessing
  • Random Forest model with balanced class weights
  • CLI with JSON and interactive modes that returns human-readable explanations
Stack Python scikit-learn pandas NumPy BeautifulSoup lxml Joblib
Status Defensive ML prototype trained on a synthetic dataset, so its scores are not a real-world benchmark.
Links Repository

WireTally  |  Network traffic investigation workbench for PCAP files
Problem Packet captures hold the evidence, but reading them packet by packet is slow. WireTally produces a repeatable first-pass summary of flows and rule-based leads, each with the evidence behind it.
Features
  • Validates local PCAP and PCAPNG files (type, size limit, empty files) before analysis
  • Extracts packet metadata with TShark and aggregates bidirectional TCP and UDP flows
  • Two transparent detection rules: high-volume transfers and flows on selected suspicious ports
  • Timestamped JSON evidence report that includes observed DNS query names
  • Three interfaces: CLI, local FastAPI endpoint and a React and TypeScript UI
Stack Python TShark FastAPI React TypeScript Vite
Status Functional prototype. Local-first metadata analysis; findings are investigation leads, not verdicts.
Links Repository

Casewire SOC  |  SOC case-management workspace
Problem Security events are only useful when they are grouped by explainable rules and carried through an investigation. Casewire demonstrates that path end to end: event, alert, incident case and response.
Features
  • Normalized event intake persisted in PostgreSQL
  • Deterministic brute-force rule: three or more failed logins from one source IP within five minutes
  • Alert-to-case triage with status, severity and owner tracking
  • Analyst notes, response tasks and a case timeline
  • React dashboard for working cases
Stack Java 21 Spring Boot Spring Data JPA PostgreSQL React 19 TypeScript Vite Tailwind CSS JUnit 5
Status Completed local MVP built on synthetic data.
Links Repository

FixTrail Security  |  Vulnerability remediation tracking from discovery to retest
Problem Vulnerability findings often stall between discovery and a verified fix. FixTrail keeps every finding tied to an asset, an owner, evidence and a retest result.
Features
  • Asset inventory with findings from manual entry, JSON files and Nmap XML imports
  • Repeat observations recorded against the same finding instead of creating duplicates
  • JWT authentication with four roles: Admin, SecurityAnalyst, RemediationOwner and ReadOnly
  • Remediation task assignment, evidence references, retest outcomes and audit events
  • Angular client with login, asset, finding and import screens
Stack C# ASP.NET Core (.NET 8) Entity Framework Core PostgreSQL ASP.NET Identity JWT Angular 21 TypeScript xUnit GitHub Actions
Status Local MVP with CI covering the build, unit tests and the Angular production build.
Links Repository

TrustBoundary Lab  |  Security evaluation workbench for LLM applications
Problem LLM applications fail at their trust boundaries: hostile prompts, untrusted retrieved documents and unauthorized tool calls. This lab makes those tests repeatable and the evidence inspectable.
Features
  • Versioned JSON scenarios: direct injection, indirect injection, canary leakage, RAG poisoning simulation and unauthorized tool use
  • Deterministic mock provider for repeatable runs, with an optional Gemini provider
  • Assertions: exact-string exclusion, regex checks and heuristic checks reported as inconclusive
  • Per-scenario JSON evidence and an aggregate summary
  • FastAPI service and React dashboard, with pytest and CI on every push
Stack Python Pydantic FastAPI React TypeScript Vite pytest Gemini API GitHub Actions
Status Functional local MVP. The hosted page is a frontend preview; the evaluation API runs locally.
Links Repository  |  Live frontend preview

Quality Engineering and Backend Reliability

AssertLane  |  Test evidence and release-readiness platform
Problem Test activity is scattered, and a red result does not say whether the product or the automation failed. AssertLane records results as evidence tied to test cases and runs, to support release review.
Features
  • Projects, suites, test cases, runs and results through a documented REST API
  • Result states that separate product failures from automation or environment errors
  • Case versioning: each result records the version of the case that was executed
  • Result import, including a bridge from Playwright JSON reports
  • Alembic migrations, pytest API tests and a React and TypeScript dashboard
Stack Python FastAPI SQLAlchemy SQLite Alembic React 19 TypeScript Vite Tailwind CSS Playwright pytest
Status MVP preview. The frontend is hosted; the API runs locally.
Links Repository  |  Live frontend preview

Schema Drift Observatory  |  Breaking-change detection for OpenAPI contracts
Problem An API specification can stay valid and still break its consumers: a removed operation or a new required parameter is enough. This tool catches those changes before release.
Features
  • Compares a baseline and a candidate OpenAPI file
  • Six rules (SDO-001 to SDO-006) classify findings as breaking, potentially breaking or non-breaking
  • Each finding carries a rule ID, location, impact and remediation guidance
  • Text or JSON output with a configurable fail-on policy that sets the CI exit code
  • Vue 3 dashboard prototype that displays a sample report
Stack Go libopenapi Vue 3 TypeScript Vite GitHub Actions
Status Early MVP covering a documented subset of compatibility rules, with CI.
Links Repository

OutboxWorks  |  Reliable webhook delivery service
Problem A direct webhook call is lost when the receiver is down or the response never arrives. OutboxWorks stores events durably, delivers them reliably and makes every failure visible.
Features
  • Transactional enqueue with per-endpoint idempotency keys
  • HMAC-SHA256 signed payloads with timestamps for receiver-side verification
  • Worker claiming with PostgreSQL SKIP LOCKED, exponential retries and a dead-letter state
  • Admin-authorized replay with audit events, and AES-256-GCM encrypted endpoint secrets
  • SSRF checks on destinations, separate Admin and Producer tokens and a monitoring dashboard
Stack TypeScript Node.js 24 Express 5 PostgreSQL 16 Zod GitHub Actions
Status Hardened portfolio MVP with CI and a PostgreSQL-backed test suite.
Links Repository

AI, Machine Learning and MLOps

Model Release Observatory  |  Experiment tracking, release evidence and drift signals
Problem A trained model is not yet a release. Teams need to know which data and configuration produced it, whether it passed a policy, and how it behaves once served. This project records that evidence.
Features
  • Training runs tracked in MLflow with parameters, metrics, dataset fingerprint and model artifact
  • Run comparison and a threshold-based release report (F1 and recall of at least 0.95)
  • Statistical drift check using the Kolmogorov-Smirnov test
  • FastAPI inference endpoint and a latency benchmark reporting P50, P90 and P99
  • Reports stored as inspectable JSON files
Stack Python scikit-learn MLflow SciPy pandas FastAPI pytest
Status Completed local MLOps MVP on a public demo dataset. Not intended for clinical use.
Links Repository

Mobile Applications

FieldAudit  |  Offline-first Android inspection app
Problem Inspectors often work without reliable connectivity, and lost work or silent sync failures are unacceptable. FieldAudit keeps drafts on the device and makes sync outcomes explicit.
Features
  • Offline-first inspection drafts stored locally with Room
  • Background sync through WorkManager when a network is available, with exponential backoff
  • Sync responses classified as success, conflict, permanent error or retryable failure
  • Revision-aware FastAPI sync endpoint with safe retry behavior
  • Jetpack Compose interface and separate CI workflows for Android and the backend
Stack Kotlin Jetpack Compose Room WorkManager Ktor Python FastAPI GitHub Actions
Status Prototype under active hardening. Not intended for real inspection data yet.
Links Repository

Zero Trap  |  Emergency help and location sharing app
Problem In an emergency, asking for help and sharing a location must take seconds, and nearby people should be able to see the request and respond. Zero Trap connects people who need help with people who can give it.
Features
  • Emergency help requests with active, accepted, completed and cancelled states
  • Location sharing on Google Maps and discovery of nearby requests
  • Real-time, timestamped chat between requester and helper
  • Push notifications, Firebase Authentication, profiles and helping scores
  • Privacy policy, terms, and user report and block foundations
Stack React Native Expo SDK 52 JavaScript Firebase Authentication Cloud Firestore Firebase Storage React Navigation React Native Maps EAS
Status Android app in active development. Production hardening and a security review are on the roadmap.
Links Repository

Games and Programming Fundamentals

NEON//TRACE: Dhaka 2047  |  3D cyber-investigation thriller built in Godot
Concept A third-person cyber-investigation thriller set in a fictionalized near-future Dhaka. It is built systems-first, so reusable gameplay modules exist before the city is built around them.
Features
  • Third-person controller with sprint, crouch, jump and a spring-arm camera
  • Scanner, evidence collection and a terminal hacking framework
  • Stealth with escalating security states and guard patrol detection foundations
  • Mission, objective and checkpoint management with save and load
  • Branching ending framework and an extraction objective
Stack Godot 4 GDScript Signal-based architecture Data-driven design Android export
Status Playable vertical-slice prototype in progress, with a published Android debug build.
Links Repository  |  Android debug APK

Library Book Management System  |  Console application built around core OOP principles
Purpose A practical library simulation used to apply the four core object-oriented principles in Java: abstraction, encapsulation, inheritance and polymorphism.
Features
  • Academic books and storybooks built on an abstract Book class
  • Borrow and return operations with availability checks
  • Views for all, available and borrowed books
  • Automatically generated unique book IDs
  • Custom BookNotAvailableException and input validation in an interactive console menu
Stack Java OOP Abstract classes Polymorphism ArrayList Custom exceptions
Status Completed educational console application using in-memory storage.
Links Repository

Click the Projects heading above to collapse this section.


Divider

Career Interests & Open Roles

Domain Roles
Software Quality SQA Engineer, QA Analyst, Test Automation Engineer, SDET
Cloud Security Cloud Security Engineer, SOC Analyst, Security Analyst, DevSecOps Engineer
AI & Automation Virtual Assistant, AI Automation
Industry Focus FinTech, ERP Systems, Healthcare, Public Sector, Enterprise

Divider

GitHub Analytics

A snapshot of my coding activity, consistency, and language footprint

GitHub Profile Details

Top Languages by Repository Most Used Languages by Commit

GitHub Stats Productive Time

Animated 3D Contribution Calendar

A year of coding activity, visualized in 3D.

Animated 3D GitHub contribution calendar

GitHub Streak (live, fallback)

Divider

GitHub Trophies

GitHub Trophies

Divider

Contribution Snake

Snake animation

Divider

Education

Level Details
University B.Sc. in Computer Science & Engineering — East West University, Dhaka
Major: Intelligent Systems & Data Science | Expected Graduation: 2028
School and College HSC (2022) — GPA: 5.00/5.00 (Science)
SSC (2020) — GPA: 5.00/5.00 (Science)

Divider

Let's Connect

Connect



LinkedIn Email

Footer

Pinned Loading

  1. Zero-Trap---Android-App Zero-Trap---Android-App Public

    This android app is about sharing locations in emergency.

    JavaScript 1

  2. schema-drift-observatory schema-drift-observatory Public

    Detect breaking API contract changes and generate compatibility reports across service versions.

    Go

  3. wiretally wiretally Public

    A defensive network traffic investigation workbench for PCAP analysis, flow reconstruction, and evidence-backed reports.

    Python

  4. assertlane assertlane Public

    A quality engineering platform for test planning, automation runs, flaky-test analysis, and release readiness.

    Python

  5. fixtrail-security fixtrail-security Public

    Track vulnerability findings, remediation ownership, security evidence, and retesting across assets.

    C#

  6. trustboundary-lab trustboundary-lab Public

    Evaluate LLM application security through repeatable prompt-injection, RAG, and tool-boundary tests.

    Python