Abdulmumin Abdulwahab

Run my tools See the work

01 Who I am

Health research taught me rigour. Security taught me paranoia. Engineering is where both get used.

02 Ask the site

A real shell. Type help, or just poke at it. It answers with everything on this page.

visitor@abdulwahab.dev, ~/portfolio, zsh --:--

03 What I do

Six disciplines that keep feeding each other. Tap any row for detail.

Capability profile

04 The Tool Lab

Twenty working tools, not screenshots. Everything executes locally in your browser, no server, no telemetry, nothing you type leaves this machine.

Security

Data

Python

Engineering

Password Analyzer

Entropy, pattern detection and offline crack-time modelling

100% client-side

Password / passphrase - never transmitted

Mask input

Strength -

Offline crack time by attacker class

Attacker	Hardware	Guesses/sec	Time to break

Findings

Input

Secret key

Algorithm

Message

HMAC

Enter a key and message.

⬢

Drop a file to checksum

SHA-256 / SHA-1 / SHA-512 · processed in-memory, never uploaded

JSON Web Token

Header

Payload

Security review

Paste a raw HTTP response header block (from curl -I or DevTools → Network → Headers). Graded against OWASP Secure Headers guidance.

Response headers

Network (CIDR)

Split into /

Binary mask

Subnets

#	Network	First host	Last host	Broadcast	Hosts

Cipher

Key / shift

Direction

Input

Output

A safe demonstration of why unsanitised input is dangerous. The "vulnerable" render below uses innerHTML inside a sandboxed frame; the hardened one escapes and CSP-restricts it. Nothing executes against this page.

Untrusted input

◉ Vulnerable render, innerHTML

◉ Hardened render, escaped + CSP

Detection

▤

Drop a CSV or TSV here

Parsed in-memory · nothing uploaded · up to ~20 MB

Preview

Load a dataset first.

Chart

Field X

Field Y

Pearson correlation across every numeric field. Deep teal = positive, deep rust = negative.

Numeric field

Z-score threshold, 3.0

A tiny SQL engine over your loaded table (aliased data). Supports SELECT … FROM data WHERE … ORDER BY … LIMIT …, plus COUNT/SUM/AVG/MIN/MAX and GROUP BY.

SELECT * FROM data LIMIT 20

Numbers, comma, space or newline separated

Distribution

Box plot

Welch's two-sample t-test, no equal-variance assumption.

Sample A

Sample B

Cochran's formula with finite-population correction, the calculation I reach for in research design.

Population size

Confidence

Margin of error %

Expected proportion

CPython 3 compiled to WebAssembly · ~10 MB first load, then cached

Preloaded scripts

stdout

Runtime not started. Click "Start Python runtime", it downloads CPython to your browser, then runs entirely offline.

Pattern

Flags

Test string

Highlighted matches

Capture groups

JSON

{"name":"Abdulmumin","roles":["security","fullstack","data"],"certs":{"comptia":1,"opswat":7},"active":true}

Output

Original

{"version":1,"tls":"1.2","ports":[80,443],"debug":true}

Modified

{"version":2,"tls":"1.3","ports":[443],"debug":false,"hsts":true}

A real fetch client. Cross-origin requests obey the target's CORS policy, a blocked request is the browser's security model working, and the response panel explains which one fired.

Method

URL

Headers (one per line, Key: Value)

Body

Response

No request sent yet.

Transform

Input

Output

Length, 20

How many

Output

Generated with crypto.getRandomValues(), a CSPRNG, not Math.random().

Type

How many

Bytes / length

Output

Cron expression

In English

Next 8 runs

Foreground

Background

Large text, 24px bold

Body copy at 14px. If this is hard to read, the ratio below will say so.

Suggested accessible alternatives

05 Selected work

Things I built end to end. The first three are running on this page right now.

06 Flagship builds

The serious projects. Not live toys, real systems. Request a private walkthrough of any of them.

Want to see one running, or build something like it?

Private demos, source walkthroughs and freelance engagements.

Start a project

07 Credentials

Every one verifiable at source. Click any card to read the certificate.

08 The path here

Research ethics to offensive security, roughly in that order.

09 Beyond the code

I do not just build the tech. I help run the company behind it.

10 Get in touch

Let's build
something
that holds.

Security review, a Python tool that saves your team a week, a full build from scratch, or just to argue about whether that CVE is actually exploitable. I reply to everything.

Request freelance work