Aditya
Let’s talk
Take a look around.
addy.main061@gmail.com ↗

ADITYA / AKA SHELLGHOSTT

INDEPENDENT MIND. OPEN SOURCE.

Curiosity,
engineered.

Hey, I’m Aditya. I build tools, take systems apart,
and follow the interesting questions.
Security-minded. Creatively wired.

Explore my work
BUILDING & LEARNING IN PUBLIC
SCROLL TO DISCOVER PORTFOLIO / 2026
Build with intent.Break with curiosity.Learn by doing.
01 / SELECTED WORKA FEW THINGS I’VE PUT INTO THE WORLD

Less talk.
More making.

Tools for looking closer, building better,
and making the complicated a little clearer.

Released · v0.3.1

A browser-powered crawler that turns JavaScript-heavy websites into structured, usable data.

PythonAsyncioPatchright
Source

Open source

Peeling back JavaScript bundles to reveal the code, endpoints, and structure underneath.

TypeScriptASTWebcrack
Source

In development

Diagnosing runtime, PATH, port, and local Docker issues with clear next steps.

GoCLIDiagnostics
Source

In development

Making build artifacts inspectable with deterministic manifests and offline hash verification.

GoSHA-256Build tooling
Source

Built in the open. Always a work in progress.

More from the workbench
02 / THE PERSON BEHIND THE COMMITSA HEALTHY AMOUNT OF “WHAT IF?”

A builder’s hands.
A hacker’s curiosity.

Aditya@Shellghostt
MADE OF
CURIOSITY

I like the moment something stops being a black box.

A web app, a network, a cryptic bundle of JavaScript. I want to understand what’s happening underneath, then turn that understanding into something useful.

My work lives around cybersecurity, developer tools, and systems. Sometimes that means building a crawler. Sometimes it means tracing an artifact back to its source. The common thread is curiosity, followed all the way through.

Meet me on GitHub (opens in new tab)
/ 01

Understand deeply.

Explore the system, question the assumptions, and find out why it behaves the way it does.

Web securityNetworking
/ 02

Make it useful.

Turn an interesting problem into a tool with a clear purpose and an understandable interface.

PythonGoTypeScript
/ 03

Keep exploring.

Share the code, stay open to feedback, and leave room for the next unexpected question.

Open sourceAI security
ON MY RADAR

Detection engineering · Network defense · LLM security · Secure application design

03 / A LITTLE ROOM TO PLAYNOT EVERYTHING NEEDS A README

Logic, meet play.

A small, living sketch. Move through it.
Change its rhythm. See what happens.

Signal Garden / EXPERIMENT 001
LIVE CANVAS
ORDER.
CHAOS.
A little of both.

MOVE YOUR CURSOR. DISTURB THE PATTERN.

A tiny experiment in creative coding.NO RIGHT ANSWERS. JUST GOOD QUESTIONS.

04 / THE OPEN WORKBENCHGITHUB ↗ (opens in new tab)

More in the making.

8 projects / Handpicked from my GitHub. Details reflect the repository documentation.

05 / GOOD THINGS START WITH A CONVERSATION

Have something
in mind?

An interesting idea, a tricky problem, or just a hello.
I’d love to hear it.

PROJECT NOTES / Python

Released · v0.3.1

WebVac

Modern websites don't give up their structure in a single HTTP response. WebVac uses a real Chromium browser to explore dynamic pages and collect the details that static scrapers miss.

What’s inside

Available as a Python package. The source repository includes setup instructions, examples, and the optional analysis integration.

PythonAsyncioPatchright
Explore the repository (opens in new tab)
PROJECT NOTES / TypeScript

Open source

De-Caffeinator

A bundled application can hide a lot of useful context. De-Caffeinator follows JavaScript assets through discovery, source-map recovery, deobfuscation, and artifact extraction for security auditing.

What’s inside

The README also calls the underlying pipeline Blob Unpacker. Findings still need a human review.

TypeScriptASTWebcrack
Explore the repository (opens in new tab)
PROJECT NOTES / Go

In development

BuildTrace

Knowing which source produced a binary starts with recording evidence. BuildTrace captures source and build metadata, then records artifact hashes in a deterministic manifest.

What’s inside

M2 is implemented but unreleased. Hash matching establishes consistency with an unsigned manifest; signed attestations and builder authentication are future work.

GoSHA-256Build tooling
Explore the repository (opens in new tab)
PROJECT NOTES / Go

In development

QueueLens

QueueLens lays the groundwork for understanding distributed background jobs by collecting queue state and worker lifecycle events in one place.

What’s inside

M2 is unreleased. Analytics, stall detection, dashboards, and alerts are planned, not current features.

GoRedisPostgreSQL
Explore the repository (opens in new tab)
PROJECT NOTES / Go

In development

EventRelay

EventRelay explores the infrastructure between receiving an event and delivering it reliably to an HTTP destination.

What’s inside

M2 is unreleased. Consumers must deduplicate events. Advanced retry policies, replay, and a dashboard are future milestones.

GoRedis StreamsPostgreSQL
Explore the repository (opens in new tab)
PROJECT NOTES / Python

In development

SchemaSentry

Before assessing the risk of a database change, you need a dependable picture of the schema. SchemaSentry captures that picture and compares the structure across snapshots.

What’s inside

M2 is unreleased. Migration risk classification and scoring are planned, not implemented.

PythonPostgreSQLSQL
Explore the repository (opens in new tab)
PROJECT NOTES / Go

In development

EnvDoctor

Development environments fail in surprisingly repeatable ways. EnvDoctor gathers platform facts and applies explicit rules to explain what went wrong.

What’s inside

M2 is complete but unreleased. Diagnosis never applies fixes automatically; broader packaging and clean-host validation remain future work.

GoCLIDiagnostics
Explore the repository (opens in new tab)
PROJECT NOTES / Kotlin

Exploration

ChatApp

An earlier exploration of native Android development through a chat application.

What’s inside

An experimental repository; no hosted demo is available.

KotlinAndroid
Explore the repository (opens in new tab)