Zihad Hasan
Generative AI & Full-Stack Developer · Workflow Automation · Cybersecurity
Dhaka, Bangladesh · Website · Portfolio · LinkedIn · GitHub · Email
Profile Overview
Generative AI and full-stack developer who ships production software across web, mobile, desktop, and backend — plus the security background to audit it. Built 61 repositories (22 public; TypeScript, Python, Dart), automated admissions and event workflows, and found a CVSS 9.1 critical vulnerability exposing student data, then re-tested the fixes. Currently teaching Generative AI and digital-literacy courses at the As-Sunnah Skill Development Institute, completed all semesters of Phitron's CS Fundamentals course (C, C++, Data Structures & Algorithms, Python OOP, SQL, FastAPI, React), and author of Digital Shikar, a self-published Bengali-language book on cybersecurity and smartphone privacy.
Technical Stack & Tooling
- Languages & Runtimes: TypeScript, JavaScript (ES6+), Python, Dart, C++, PHP, Bash, Node.js
- Frontend & Mobile: React 19, Next.js 15, Flutter, Zustand, Tailwind CSS, HTML5, Modern CSS
- Desktop & System Software: Electron, CustomTkinter, FFmpeg, SQLite (WAL Mode), Native OS Font Registry APIs
- Backend, Systems & Cloud: Node.js, Express, FastAPI, SQLAlchemy ORM, Alembic, JWT Auth, Firebase (Realtime Database, Firestore, Auth), Supabase, PostgreSQL, SQLite, REST APIs, GraphQL, Docker, Google Cloud (Kubernetes), Red Hat Enterprise Linux (RHEL), Vercel
- AI Integration: LLM Integration (Google Gemini API), MCP (Model Context Protocol), Prompt Engineering
- Cybersecurity: Penetration Testing, CVSS Scoring, RLS & Access-Control Auditing, Ethical Hacking, CTF, Kali Linux
Professional Experience
Assistant Educator — As-Sunnah Skill Development Institute · Nov 2024 – Present
- Automated event registration and ticketing (Google Apps Script + LockService): concurrency-safe sign-ups, auto-generated PDF tickets, branded email delivery.
- Run recurring penetration tests on the institute's platform (dedicated test lab, findings tracked on GitHub); found a CVSS 9.1 critical Supabase RLS flaw exposing student PII, reported it with a prioritized remediation roadmap, and re-tested the team's fixes.
- Coordinated the takedown of a leaked PDF containing participants' names and phone numbers within 24 hours.
- Delivered Generative AI & digital-literacy training to hundreds of students across 20 cohorts (Batch 22–41); ran end-to-end online admissions (Google Forms, bulk email/SMS, payment verification, results).
Internal Member — Cyber Bangla · Jan 2020 – Present
- Compete in penetration testing workshops and CTF competitions (BGD e-GOV CIRT, TryHackMe, Cyber Talents).
Featured Repositories
| Repository | Focus & Architecture | Core Stack | Links |
|---|---|---|---|
| institute-soc-monitor | Agentless SOC platform for 100–300+ PCs across multiple subnets: rogue-device detection, MITRE ATT&CK mapping, CVSS risk scoring, Prometheus/Grafana dashboards. | Python, Prometheus, Grafana, WMI | Code |
| Rupantor | Desktop font management suite with Adobe After Effects/Bridge automation, OS-level font registry mapping, and offline licensing. | Electron, React 19, TypeScript, Firebase | Code · Live Demo |
| Chuti (ছুটি) | Offline-first, on-premises Leave Management System with automated quota deductions, sandwich rule logic, and LAN sharing. | Next.js, TypeScript, SQLite (WAL), Tailwind | Code · Live Demo |
| EchoScript | High-fidelity background audio recorder and speech-to-text pipeline integrating Google Gemini API for real-time transcription. | Flutter, Dart, Gemini API, Android Services | Code |
| VerifEye | Real-time AI image detection Chrome extension leveraging Google Gemini Vision models to inspect web pages. | JavaScript, Manifest v3, Gemini Vision API | Code |
| Jontro | Modern desktop video-to-audio extraction utility supporting batch conversions and high-bitrate transcoding. | Electron, React, TypeScript, FFmpeg | Code · Live Demo |
| DocuMint | Offline document processing hub engineered for optical character recognition (OCR), text extraction, and format conversions. | Python, Tesseract OCR, PIL/Pillow, CustomTkinter | Code |
| about | Fast, lightweight, and responsive static personal portfolio website. | Semantic HTML5, Modern CSS3, Vanilla JS | Code · Live Demo |
| SendFiles | Web-based peer-to-peer file transfer application utilizing direct browser data channels with real-time transfer state. | WebRTC, TypeScript, React | Code |
GitHub Stats
Education & Training
- Phitron — CS Fundamentals (Fall 2025 session) — Completed all semesters: C, C++, Data Structures & Algorithms, Python OOP, SQL, React, FastAPI. Semesters 1–2 CGPA 3.67 (Certificate PHDSA-077471791180)
- BA (Honours) in English — National University of Bangladesh — in progress (2nd year)
- Alim (HSC-equivalent), Science — Gabtali Alim Madrasah, 2023 — GPA 4.63/5.00
Certifications & Publications
Certifications: Fundamentals of MCP (Model Context Protocol) · Manage Kubernetes in Google Cloud (Google) · Generative AI for Educators
Publication: Digital Shikar (ডিজিটাল শিকার) — Bengali-language book on cybersecurity and smartphone privacy, self-published and sold on Rokomari.
Contact & Profiles
- Personal Platform: https://zihadhasan.web.app/
- Portfolio Showcase: https://zihaaaad.github.io/about/
- LinkedIn: https://www.linkedin.com/in/pkmzihad/
- X (Twitter): https://x.com/pkmzihad
- Email: zihad.connects@gmail.com