Black Aesthetic · White Ethics · MultiHAT in Training

Sagar Biswas MultiHAT-in-Training Web App Security and Development

CSE student at AIUB, web developer, and cybersecurity enthusiast. I learn by building secure systems, testing web apps, and sharing knowledge openly. Sagar Biswas is focused on MultiHAT-in-Training Web App Security and Development.

View Projects Contact Me
AIUB CSE Student
Open-Source Projects & Tools
Web App Security Focus

COMMUNITY

· AIUB
· GitHub
· MutliHAT - YT
· AIUB CyberSecurity & Programming Society - Facebook Community Group

About Sagar

I am a Computer Science and Engineering (CSE) student at American International University–Bangladesh (AIUB). I focus on web development, web application security, and building modern web experiences. My goal is to become a true MultiHAT who can both attack and defend with integrity.

Web App Security

Learning tips, automation, OSINT, SOC fundamentals, and web penetration testing (XSS, SQL injection, CSRF) with ethical, permission-based practice.

Web Development

Building clean, efficient applications with HTML, CSS, JavaScript, PHP, and React, and focusing on secure-by-design architecture.

Focus Areas

Hands-on learning tracks and the skills I’m growing every day.

Security Learning

  • Web security fundamentals: XSS, SQLi, CSRF
  • Tooling: Burp Suite, OWASP ZAP, Metasploit
  • Networking: HTTP/HTTPS, DNS, TCP/IP

Development Stack

  • HTML, CSS, JavaScript, PHP, React
  • Python, C, C++, C#, Java, Bash Script, Arduino Script
  • Databases: MySQL, PostgreSQL, MongoDB

Community & Content

  • GitHub: projects & notebooks
  • YouTube tutorials & walkthroughs YouTube Channel
  • AIUB Cybersecurity & Programming Society initiatives (Facebook group)
Python C C++ C# Java Bash Script Arduino Script Ducky Script HTML CSS JavaScript PHP React MySQL PostgreSQL MongoDB Burp Suite OWASP ZAP Metasploit Wireshark Nmap Git & GitHub Linux Windows Android Networking HTTP/HTTPS DNS TCP/IP OSINT SOC Fundamentals XSS SQL Injection CSRF

Featured Projects

Open-source work and learning assets from my GitHub.

Foundations of Networking Notebook

A beginner-friendly guide to networking fundamentals, breaking down how the internet really works. Covers TCP vs UDP, IP addressing, DNS, OSI & TCP/IP models, IPv4 vs IPv6, and Wi-Fi security basics. Perfect for students and tech enthusiasts building strong networking foundations.

View: Networking Notebook (AIUB Cybersecurity & Programming Society) Notebook

Ultimate Bash Script Handbook

From my first echo "Hello World" to real-world automation, this Bash Scripting Handbook documents my complete learning journey—covering core concepts, scripting logic, debugging, security, and practical projects. A hands-on roadmap for mastering Bash and Linux automation. 🐧⚙️

View: Bash Script Handbook (AIUB Cybersecurity & Programming Society) Notebook

NOTE: To find more notebooks, projects, tips and tricks like this, join my Facebook community group and check the featured section for notebooks and explore the Posts to discover real-world projects.

Educational use only: The tools and notebooks listed here are for learning, research, and defensive purposes only. Do not use them for malicious activity. Contact me for responsible disclosure or questions.

Projects

Web Vulnerability Scanner

A simple educational web vulnerability scanner that crawls a site and checks for open directories, missing security headers, and basic SQLi/XSS patterns. Supports multithreaded crawling, insecure cookie detection, method enumeration, and detailed logging. Outputs results to scan_report.json and logs all activity in scanner.log.

View repo: Web Vulnerability Scanner Tooling

A Pythonic Hackathon

This repository contains a virtual assistant named "Sagar," tailored for CSE students passionate about cybersecurity. It processes commands to open websites, play music, or respond via an AI model. The assistant supports both single-line and multi-line inputs, offering a practical tool for learning and task automation.

View repo: A Pythonic Hackathon CyberSecurity Assistant

SharpLink URL Shortener

SharpLink is a simple URL shortener web app built with Flask. It lets you create short links from long URLs, choose custom aliases, set expiration dates, and optionally generate TinyURL mirrors. Links are stored locally in JSON and redirect instantly. Includes copy buttons, expiry handling, and is easy to run locally or deploy online.

View repo: SharpLink URL Shortener Web Dev

A_Pythonic-Keylogger

Python-based keylogger for ethical use, capturing keystrokes and emailing logs. Features include retry logic for email delivery, log file management, and cross-platform support (Windows/Linux). Configurable for auto-start via systemd or Startup folder. Designed for educational purposes, penetration testing with consent, and self-monitoring.

View repo: A Pythonic Keylogger CyberSecurity

Spech_to_Spech_AI-Assistant

This Python script creates a voice-controlled virtual assistant using speech recognition, AI responses, and text-to-speech conversion. It listens for commands like opening websites or playing music, processes them using AI, and responds via speech. Powered by Google’s Speech Recognition, Groq API, and pyttsx3 for voice interaction.

View repo: Speech-to-Speech AI Assistant AI

Library-Management-System

A desktop Library Management System built with Python and Tkinter. Manage books, members, checkouts, returns, and overdue items with automatic local saving. Features search, filters, analytics, CSV/JSON export, and backups. Includes secure login with SHA-256 password hashing and TOTP-based two-step authentication. Runs fully offline on Windows.

View repo: Library Management System AI

My more works

📔NoteBooks AND Facebook Community Group


Google_Dorks_Notebook C-Programming-handBooks

TIP: For more notebooks, projects, and real-world tips, join my Facebook community group and check the featured section along with recent posts.

AIUB CyberSecurity & Programming Society

Useful Repositories


Web_Penetration_Testing_Roadmap Cybersecurity-Library WSL-Installation_Guide


🤖AI Based Projects


Spech_to_Spech_AI-Assistant A_Pythonic_Hackathon Chat-Automation-Bot_Ai-Assistant AI_Pickup-Line_Generator Cyber-Command_AI-Assistant.exe


🤖 Tools/Automation


Web_Vulnerability_Scanner Web_Vulnerability_Scanner A_Pythonic-Keylogger MAC-Address_Changer_Script


🧑‍💻 Development


SharpLink-URL-Shortener-Web Converter-Photos-to-PDF_PDF-to-photos AirportDesk-Assistant Library-Management-System SecurePay_E-Wallet SecurePay_E-Wallet Student-Management-MVC-Learning-Project Tic-Tac-Toe_Game cpp-banking-system Bank-Account-Management-System customer-slip-generator Contact-Management-System-C


🤖 Small Projects


Web_Vulnerability_Scanner Clean_Temporary_Files-Windows Fake_FACEBOOK_Login_Page EmailBomber Resume-Analyzer-Builder-V3 Port_Scanner-Python RandomPasswordGeneratorCpp TinyURL-Shortener todo-list-app python-alarm-clock Simple_Text_Editor text-bombing secure-login-system Saved-WiFi-Passwords Image_to_PDF_Converter Scientific_Calculator Hash_Password_Cracker Network_Communication_Scripts virusNewFolder web-source-code_downloader domain-to-ip


Collected Projects


Impress-Crush-CPP-ASCII


Featured YouTube video thumbnail

Featured Work

MultiHAT Featured Video

Showcasing my YouTube community.

Watch on YouTube

Latest Blog

Threat stories, security lessons, and real-world awareness topics.

Blogs Gallery
WSL2 Kali Linux Win-KeX installation guide cover

January 17, 2026 · WSL2 & Kali Linux

WSL2 + Kali Linux + Win‑KeX (GUI) Installation Guide (Beginner‑Friendly)

A notebook‑style guide with exact commands, recommended prompt answers, screenshots, and fixes. Perfect for a clean Windows + WSL2 + Kali GUI setup.

Read the blog: WSL2 + Kali Linux + Win‑KeX
Full-page screenshot using DevTools

January 17, 2026 · Web Tips

Easiest Way to Take a FULL-PAGE Screenshot Using Inspect! 📸

Open DevTools, use the Command Menu, and capture a full‑size screenshot in seconds. No extensions needed.

Read the blog: Full-page screenshot using Inspect
A printer displays a warning about a compromised network

January 17, 2026 · Security Awareness

🧨 Fun Fact: A Cyberattack That Can Start With… a Printer 🖨️

Printers are often ignored, under-patched, and trusted by everything inside a network. This post breaks down how a printer became the quiet entry point for attackers — and what you can do to stop it.

Read the blog: Printer attack entry point
Vibe coding and tech debt illustration

January 17, 2026 · Engineering Culture

Vibe Coding মানে দ্রুত কাজের আড়ালে ধীরে ধীরে টেক ডেবট জমা করা

AI দিয়ে দ্রুত ডেলিভারি সম্ভব, কিন্তু ভুল সিদ্ধান্তে তৈরি হয় বাড়তি জটিলতা। এই লেখায় আছে সহজ ব্যাখ্যা — কোথায় স্পিড দরকার, আর কোথায় সরলতা দরকার।

Read the blog: Vibe coding & tech debt
Anonymity and privacy illustration

January 17, 2026 · Privacy & OpSec

Complete, Forever Anonymity Doesn't Exist — Here's What Actually Works

Nation-state actors can correlate metadata and behavior. VPNs and proxies help, but real anonymity depends on identity separation, fewer actions, and avoiding linking accounts.

Read the blog: Anonymity & OpSec
Wi-Fi security alert illustration

January 17, 2026 · Network Safety

Wi‑Fi Security Alert: MAC Blocking Isn’t Enough — What to Do Instead

Blocking by MAC can be bypassed on modern phones. The safest fix is a password change plus tighter router settings.

Read the blog: Wi-Fi security alert
Quantum cryptography and encryption illustration

January 18, 2026 · Cryptography & Future Security

Why Quantum Computers Will Break Your Encryption (And Why We're Ready)

Quantum computers threaten current RSA and ECC encryption. NIST's post-quantum standards exist today. Learn what organizations should do now.

Read the blog: Quantum cryptography

Certifications

Verified learning milestones and professional training.



Download PDFs of Certifications

Resume

Download or view my latest resume.

View Resume Download

Featured Content

Videos, learning labs, and community resources I follow and contribute to.

YouTube: MultiHAT Featured

Watch my featured video on YouTube for updates and walkthroughs.

Watch video

AIUB CyberSecurity & Programming Society

Another featured focused on security learning and tooling.

Visit the community

Labs & Learning

PortSwigger, OWASP Top 10, TryHackMe, and Hack The Box.

Explore labs

Contact & Collaboration

Open to ethical collaboration, learning opportunities, and community projects.

Direct


Email: eng.sagar.aiub@gmail.com

Phone: +880 1727 361077

Facebook

Social


Facebook Community

Availability


Bangladesh · Remote collaboration

Currently focused on learning and open-source

Responsible disclosure only. If you discover a security issue in my work, contact me directly at eng.sagar.aiub@gmail.com.