I build REST APIs with Java and Spring Boot, tune SQL Server queries for performance, and write Python ETL pipelines that ingest live data feeds, persist them to a database, and run unattended in the cloud with alerting and failure detection. I also investigate network traffic in Wireshark to reconstruct intrusions from packet capture.
Reconstructed a full compromise of an Apache Tomcat web server from a 21,000-packet capture, isolating attacker and victim hosts from conversation statistics and building a timestamped attack timeline. Traced the intrusion end to end — TCP port scan, Gobuster directory enumeration, discovery and brute-force of the Tomcat Manager interface, malicious file upload, and reverse shell callback disguised as outbound HTTP traffic — using display filters, custom columns, and TCP flag analysis. Completed all eight investigative questions (8/8) with a verifiable achievement record.
view achievement →ETL and alerting pipeline that ingests live gauge readings for 196 river stations from Nepal's Department of Hydrology and Meteorology JSON API, normalizes them against per-station warning and danger thresholds, and persists readings to SQLite for historical trend analysis. Reliability safeguards: readings older than 90 minutes are excluded rather than silently treated as normal, duplicate alerts are suppressed, and a recurring heartbeat plus failure notice makes pipeline downtime detectable instead of invisible. Deployed to an Ubuntu VM on Oracle Cloud with cron-scheduled runs every 15 minutes, delivering public alerts through a Telegram bot channel; credentials load from a gitignored environment file.
github.com/Tilakthapa3/nepal-river-watch →Command-line data pipeline that ingests and parses Nmap XML output, transforms it into structured records, and generates prioritized remediation reports rating each exposed service HIGH, MEDIUM, or LOW. Integrates Axiom log ingestion for run observability and alerting, with environment-based secret loading to keep API credentials out of version control.
github.com/Tilakthapa3/nmap-triage →Full Android application backed by a Java/Spring Boot REST API, owning documentation, version control, and deployment.