A comprehensive archive of production web applications, verified security research disclosures on YesWeHack, official Google Cloud credentials, and technical certificates earned by Jojin John.
Free, developer-first Indian Railways live train tracking API. Delivers real-time running status, GPS position, delays, route progress, ETA, and station lookup with honest freshness metadata.
Browser-based live TV streaming platform for browsing, searching, and watching 100+ public television channels worldwide with zero downloads. Includes installable PWA mode and OLED true-black mode.
Open student-powered study resource network for sharing verified exam notes, syllabus handouts, and past university question papers. Features built-in AI Study Tutor and GPA calculator.
Modern lightweight Backend-as-a-Service for PostgreSQL. Delivers instant introspected REST APIs, real-time CDC, S3/R2 storage, AI SQL copilot, and sub-50ms Cloudflare Hyperdrive edge runtime.
Privacy-first website security scanner conducting 150+ automated security audits across 13 vulnerability categories with zero data persistence. Next.js frontend with Cloudflare Workers backend.
Browser-native Android APK security analyzer. Decodes AndroidManifest.xml, scans permissions, analyzes DEX bytecode, and detects hardcoded secrets and OWASP risks with zero server uploads.
No-login Android app & package intelligence directory for security researchers and reverse engineers. Multi-source search across APKMirror, Play Store, and FOSS repos with checksum verification.
Searchable bug bounty writeup & CTF walkthrough archive aggregating 7,400+ reports from Pentester.land, PortSwigger, Medium, Google Project Zero, and GitHub.
Client-side digital forensics & image privacy inspector. Analyzes EXIF, IPTC, and GPS geodata with map visualizer, camera metadata inspection, and instant one-click privacy scrubber.
High-performance in-browser Chrome extension unpacker, live code explorer, secret detector, Manifest V3 analyzer, and client-side security auditor.
High-performance edge web gateway running on Cloudflare Workers. Features SSRF protection, dynamic HTML/CSS rewriting, SPA routing, and Daytona compute sandboxes.
Comprehensive developer & productivity tool suite featuring multi-format text converters, JSON formatters, code generators, and regex testers running entirely in-browser.
Interactive blockchain and smart contract visualizer and reactive dApp workbench with real-time state transition diagrams and contract inspectors.
Disposable temporary email inbox service for protecting personal privacy against spam, newsletters, and marketing trackers. Instant real-time mail stream.
Encrypted file delivery and sealed digital drop utility. Features client-side encrypted asset bundling with one-time view access keys and auto-purge.
Clean, minimal ephemeral messaging and end-to-end encrypted notes utility with self-destructing links and client-side zero-knowledge decryption.
High-speed developer icon delivery CDN & vector SVG library. Search, inspect, copy, and stream thousands of optimized vector icons with sub-second edge distribution.
Interactive dual-frame responsive website comparison workbench. Test mobile vs desktop viewport layouts side-by-side with synchronized scrolling and resolution presets.
Realistic third-person 3D tropical survival browser game built natively with Three.js, TypeScript, and Rapier3D physics. Rigged humanoid locomotion and PBR shaders.
Interactive 3D watermelon-jelly simulation featuring real-time XPBD soft-body physics, dynamic knife slicing, and volumetric WebGPU shaders running client-side.
Digital event invitation platform with automatic event-based link expiration. Features 12 luxury themes, multi-language support (English/Malayalam), and RSVP tracking.
International career portal and employment exchange for overseas job seekers. Features verified international listings, sector categories, and application workflows.
Discovery & Mechanism: Discovered during security testing on an enterprise multi-tenant cloud application. An API patch endpoint responsible for team workspace assignments failed to validate tenant ownership cryptographically against session tokens.
Impact: Allowed any low-privilege authenticated user to cross organization boundaries, elevate to super-admin status in arbitrary tenant workspaces, and access customer private data.
Outcome: Triaged by YesWeHack within 24 hours, escalated to engineering, resolved with server-side authorization boundaries, and rewarded with top-tier bounty compensation.
