Full timeline
16 phases, one direction
The complete path — for readers who want depth beyond the homepage highlights.
Became obsessed with how computers work beneath the surface — operating systems, networking, application internals, and automation.
Started building real APIs, full-stack systems, and deployment pipelines. Explored Docker, Linux servers, reverse proxies, SSL, and container routing.
Entered ethical hacking and bug bounty research. Submitted a first report involving a misconfigured subdomain — the beginning of active security research.
Developed a human-like QA behavior simulator and game automation bot using Playwright and Selenium. A major step in systems thinking and complex state management.
Built an ambitious full-stack platform combining mechanics of YouTube, Telegram, Instagram, and Discord, powered by Cloudflare R2 and Supabase.
Engineered an autonomous algorithmic trading system utilizing a consensus layer between Gemini Pro, GPT-4, and FinBERT for real-time market analysis.
Built a full-stack cloud-native platform digitizing Saudi government document services. 15K+ services, 8.5K+ users, 98% satisfaction — in production.
Founded and successfully exited SoleSet — an ecommerce platform sourced from Indian manufacturers. Designed and built the catalog, custom cart, admin portal, and payment gateway integration. Sold the business in May 2026.
Explored DirectX11, ImGui, and real-time rendering. Developed ACE KEY (a cryptographic API key engine) and advanced Win32 DLL injectors.
Research on LLM-powered agentic systems and DLL proxy hijacking with defensive detection focus. Published technical report with MITRE ATT&CK mapping.
Developed an Autonomous Pentest Agent featuring a 33-class attack framework. Combines an AI intelligence layer with Electron, React, Python, and Playwright.
Exploring immersive 3D commerce interfaces — synchronized product environments and spatial interaction patterns.
Developed CP-Unlocker, a stealth Chrome extension to force-enable clipboard and right-click utilities on restricted code editors, featuring low-level DOM API hook overrides to bypass behavioral tracking.
Built an anti-piracy licensing platform with HMAC-SHA256 request signing, hardware ID binding, auto-updates, and a zero-dependency C++ SDK using native WinINet & Bcrypt.
Real-world implementation of HiddenAI research — a capture-proof Windows overlay with process manager, terminal, internet control, and FPS counter built on DirectX 11, Dear ImGui, and Win32 APIs.
Created a browser extension and research paper to detect deceptive UX dark patterns on websites using DOM-based heuristics, inline warning bubbles, and dataset generation.