vol. 03 · issue 14bangalore, in
— The Field Notes of —est. 2021 · updated Apr 2026

SDE intern — AI security at Astra Security. Autonomous pentesting. This page is a logbook — projects, builds, and the occasional post-mortem.

@rohitmrrohitmr · github · linkedin · steam↓ read, or skim, or grep
pronounced like ‘row-hit’.
01 — current

the week — in progress

week 17 · apr 2026

Interning on autonomous pentesting — agents that plan and execute offensive engagements. Most specifics are public under NDA. Off-hours: the e-ink dashboard, the Bruce build, CTFs.

02 — record

record — where I've put hours

2024 → present
jan 2026 —
present

SDE Intern · AI Security — Astra Security

autonomous pentesting suite · bangalore

Building an autonomous pentesting suite with agentic platforms (Mastra, Claude SDK) wired into open-source security tools.

  • Designed agents that orchestrate recon, vulnerability detection, exploitation, and reporting with minimal human-in-the-loop.
  • Added observability via OpenInference + Langfuse — traces + monitoring for every LLM step.
  • Tuned tool coordination and data pipelines for large-scale assessments.
mastraclaude sdklangfuseopeninferencepython
sep 2025 —
dec 2025

Full-Stack Developer Intern — FabricZen

cloud kitchen / laundry mgmt platform · remote

Built a multi-tenant Cloud Kitchen Management Platform on Java 17, Spring Boot 3, MySQL, Next.js.

  • Self-onboarding tenant architecture — kitchen, user & lifecycle management end-to-end.
  • Subscription & payment processing: plans, renewals, access control.
  • Replaced third-party OTP SDKs with a secure in-house flow; cut iOS OTP costs.
  • Maintained backend APIs consumed by both iOS and Android clients.
java 17spring boot 3mysqlnext.js
oct 2024 —
jun 2025

AI Research Intern — CEVI, KLE Tech

center of excellence in visual intelligence · hubli

Developed a StyleGAN-based generative model translating terrestrial images into realistic underwater scenes.

  • Used the RSUIGM dataset for supervised training; targeted distinct Jerlov water types via clustering.
  • Owned dataset preprocessing, GAN training pipeline, and fidelity evaluation.
  • Work selected for presentation at ICCV 2025, Hawaii.
styleganpytorchrsuigmiccv '25
03 — shelves

things built — a short shelf

selected
fig. 01
k3sk3sforum
infra · full-stack2024–25

Zforums

Scalable forum platform on a multi-node K3s cluster. Traefik ingress, persistent PostgreSQL, Helm charts, ArgoCD GitOps, Prometheus + Grafana, and a custom e-ink dashboard showing live deploy status. GitHub Actions for CI/CD.
k3straefikpostgreshelmargocdgh actions
fig. 02
FIREWALL
net · security2025

Virtual Lab

Virtual enterprise network in GNS3 — Cisco routers, L2/L3 switches, FortiGate firewalls. VLAN segmentation, OSPF + BGP, NAT, zero-trust rules. Ansible-driven ZTP with SSH key-only access; Wazuh + central dashboard for endpoint threat detection.
gns3fortigateansiblewazuhospf/bgp
fig. 03
LEADERBOARDclash api · jwt · mongo
full-stack2024

GamerStat

Stats aggregator for mobile games. JWT auth, profiles, clan integration, Clash API for live player stats and battle history, leaderboards and dashboards. Node + Express + MongoDB + React.
nodeexpressmongodbreactjwt
fig. 04
field notesthis site · v3
+
meta2026

this-site

The page you're on. Static, hand-rolled, no framework. Everything here is a commit away from being different.
htmlcssvanilla
04 — cited

on paper — cited

peer-reviewed
2025

Improving Robustness of DNNs Against Adversarial Attacks

co-author · Springer Lecture Notes in Networks and Systems · 2025

A hybrid defense combining RAILS, Jacobian Regularization, and Label Smoothing for hardening deep models. Demonstrated resilience against FGSM and PGD attacks on MNIST while preserving clean accuracy. Focus: security hardening of DNNs against evasion attacks and adversarial perturbations. Presented at CRM2025 (SR University).

adv-mlrailsjacobianfgsm/pgdmnist
05 — log

the log — lately

HEAD → main
14b73e03mo agochore started the intern role · autonomous pentesting team · astra security
0ab12cc5mo agofeat this-site: first cut of the field-notes portfolio
6a2f0915mo agofeat fabriczen: multi-tenant cloud kitchen platform · java 17, spring boot 3, next.js
5f00aa86mo agoctf NCIIPC Pentathon finals — solo rank 32, overall 112
9dc210b7mo agonote CRM2025 presentation recap — slides in the drive, questions were sharper than expected
21f8a778mo agofeat zforums: traefik + cert-manager on the k3s cluster; no more manual LE renewals
7c1a4f28mo agofeat e-ink:2.13" waveshare devops dashboard · github + azure monitoring panes
b39e01212mo agofeat cevi/stylegan: RSUIGM-trained terrestrial → underwater generator
a004e1d21mo agochore amd-hackintosh: opencore EFI for ideapad gaming 3 · amd-vanilla kernel
06 — recreation

play & solder — ctf + hw

last 12 mo
— ctf scoreboard —

Selected placings

112
NCIIPC AICTE Pentathon 2025national · CTF · rev + webpentest + pcap
solo rank 32 · overall 112
national
more in the pipelineteam training · pwn + rev focus
soon
— workbench —

Hardware projects

e-ink devops dashboard

shipped2.13" Waveshare · rpi 0w

Touch-enabled desk companion on a 2.13" Waveshare e-ink: GitHub actions + Azure monitoring panes out of the box, with extra widgets (weather, crypto rate) rotated through on tap. Refreshes on a cadence that matters to the data.

BRUCE

LilyGO T-Display S3 · Bruce

shipped flipper-adjacent · rf / ir / bt

Bruce firmware flashed onto a LilyGO T-Display S3 — pocket-sized multitool for RF capture, BLE scans, IR replay. Travel-friendly hack-along board that fits in a pencil case. Works.

AMD · NOT SUPPORTED

AMD Hackintosh · IdeaPad Gaming 3

it boots opencore · amd-vanilla kernel patches

Lenovo IdeaPad Gaming 3, AMD CPU — officially "not a hackintosh platform." Running macOS anyway with the AMD-Vanilla patches. Not a "project," just entertaining maintenance work. USB map is a crime scene.

07 — inventory

stack — what I build with

as of apr 2026
AI Engineering
  • LLMs & agents claude · gpt
  • Mastra agent fw
  • LangChain orchestration
  • MCP tool protocol
  • Claude SDK tool-use
  • RAG & eval retrieval
Observability
  • OpenInference traces
  • Langfuse llm obs
  • Prometheus metrics
  • Grafana dashboards
  • Datadog apm
Offensive Security
  • Web App Pentest end-to-end
  • Threat Modeling design
  • Vulnerability Assessment scoped
  • Network / PCAP Analysis wireshark
  • Recon active + passive
  • Burp Suite proxy
  • Nuclei · Ghauri tooling
  • OWASP Top 10 reference
  • SQLi · XSS · Path Traversal classes
  • Reverse Engineering ctf
Languages · Systems
  • Python primary
  • JavaScript / TS web
  • C / C++ systems
  • Bash scripting
  • SQL query
Infra · DevOps
  • Kubernetes k3s
  • Docker container
  • Terraform iac
  • Ansible config
  • GitHub Actions ci/cd
  • ArgoCD gitops
  • Nginx · Traefik edge
  • Azure cloud
  • Postgres · MySQL · Mongo persistence
08 — open

let's talk.

replies in 24–48h
01 · githubgithub.com/rohitmr619commits > tweets
02 · linkedinlinkedin.com/in/rohit-mr619professional surface
03 · basedBangalore, INUTC+5:30
04 · currentlySDE Intern, AI Security · Astra Securityautonomous pentesting
05 · steam/id/konzentrationslagerkeepermostly single-player
Rec'd · Open For Work · 2026