Hetansh Doshi Jack of all trades

Built for Smart India Hackathon 2026 under problem statement SIH26151 from NTRO, SUTRADHAR de-anonymises threat actors operating on the dark web. It links anonymous personas scattered across marketplaces and forums back to a single author, and then works outward toward a real identity.

Most attribution tools lean on one signal, usually writing style, which collapses the moment someone changes how they type. SUTRADHAR correlates six independent signals into a single knowledge graph: stylometry, temporal activity patterns, persona reuse, OPSEC slips, crypto flow and infrastructure. A weak or deliberately spoofed signal no longer breaks the case. A supervised classifier, trained on labelled datasets and reaching 94% accuracy, runs alongside the live stylometry engine, and username enumeration plus email and phone OSINT lookups extend the graph out into the surface web.

Investigators get a web console to run the correlation and export a PDF case file built to be court-admissible under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, so the output holds up as evidence rather than staying an internal lead. Attribution is the real bottleneck in dark web enforcement, because the crime is visible long before the person is. Shortlisted in the college internal round among the top 45 teams, now being strengthened for the next stage.

Built for the BNB26 internal round, around one problem: selling 500 seats to 50,000 people without letting bots win. Most ticket drops reward whoever has the fastest connection or the most aggressive script. Fair Drop separates entry from allocation, so speed should not buy an extra chance. Eligible users enter once during a fixed window, repeated requests don't create extra entries, and seats are allocated only after the window closes, through a randomized draw.

The draw is verifiable. The SHA-256 hash of a secret seed is published when entry opens and the seed is revealed afterwards, so anyone can re-run the Fisher–Yates shuffle in their own browser and check every rank. One eligible account gets one entry, enforced by the database. Per-account and per-IP token buckets in Redis throttle floods, and an adaptive proof-of-work puzzle makes every automated attempt cost CPU. Winners get a timed hold and pick a specific seat that can never be double-booked, and unconfirmed seats roll to a waitlist automatically.

Organizers get a live 3D seat arena and a fairness audit: arrival-versus-rank correlation, and win rates by arrival time, request volume and human signal. A k6 attack lab simulates bots, bursts and retries against the same API real fans use. Fairness measured, not just claimed.

A passive security auditor for web apps that got shipped fast. A lot of products go live without anyone reviewing them for exposed secrets or weak configuration, so secpatch scans a project and reports what actually needs fixing. Built as a zero-dependency Node CLI, so it doesn't drag in a supply chain of its own just to check yours.

A set of open APIs giving developers clean access to Indian postal, banking and government data. The hard part isn't the endpoints, it's keeping them honest, so every endpoint is machine-checked daily and the results are public.

A Java application that reads resumes and pulls them apart into structured, comparable information, cutting down the manual work in first-round screening.

A traffic signal control system written in C, modelling how signal timing can adapt to changing traffic conditions instead of running on fixed intervals.

An animated GitHub profile built out of hand-generated SVG plates rather than third-party widgets, so nothing depends on an external service staying online.