00/Portfolio — 2026

Mohamed Ahmedمحمد أحمد محمد علي

Backend developer building APIs, developer tools and web-security analyzers, mostly in Python.

Selected work

  1. 01
    012026

    ShadowSpecter

    A web privacy and fingerprinting analyzer: scan a URL and see which device data its scripts read, and where that data is sent.

    Problem
    Sites read hardware and browser data silently, and it's hard to prove which script read it and which server received it.
    My role
    Solo project: concept, spec and delivery.
    Outcome
    A three-phase pipeline (browserless probes, instrumented Chromium, traffic correlation) with a 0–100 invasiveness score and a verdict in English and Arabic.
    • Python
    • Playwright
    • Chrome DevTools Protocol
    • curl_cffi
    • httpx
  2. 02
    022026

    glm-bridge

    Turns the glm-ai.chat web chat into an OpenAI-compatible API: base URL, API key and model names.

    Problem
    Tools such as n8n, Flowise, Dify and LangChain only speak the OpenAI API, so they can't use the chat directly.
    My role
    Solo project: concept, spec and delivery.
    Outcome
    Chat completions with SSE streaming, emulated tool calling, vision, image generation and multi-key auth, packaged with Docker.
    • Python
    • FastAPI
    • Uvicorn
    • SSE
    • Docker
  3. 03
    032026

    ittijah · اتجاه

    A linter that finds RTL and bidirectional-text bugs before Arabic and Hebrew users do.

    Problem
    RTL interfaces break quietly: margins on the wrong side, arrows pointing backwards, “@handle” rendered as “handle@”.
    My role
    Solo project: concept, spec and delivery.
    Outcome
    One engine for CSS, SCSS, Tailwind, JSX/TSX, HTML and translation files, with auto-fixes, a CLI, an ESLint plugin and a GitHub Action.
    • TypeScript
    • Node.js
    • ESLint
    • Vitest
    • pnpm
  4. 04
    042026

    WHook Control

    Desktop and terminal clients for your own webhook.site tokens: watch captures land, read bodies, replay them locally, rewrite responses.

    Problem
    Working with captured webhooks from a browser tab is slow when you need to inspect, replay and clean them up.
    My role
    Solo project.
    Outcome
    Two editions: a zero-dependency terminal app distributed as a single file, and a PySide6 desktop app for Linux, macOS and Windows.
    • Python
    • PySide6
    • Terminal UI
    • Inno Setup
  5. 05
    052026

    LoraAI CLI

    A terminal app for text forensics: hidden-Unicode detection, AI-writing analysis and humanization.

    Problem
    Zero-width characters, Unicode tags, bidi overrides and homoglyphs can hide data inside ordinary-looking text.
    My role
    Solo project: concept, spec and delivery.
    Outcome
    A full TUI plus a scriptable CLI that finds hidden characters and decodes any readable payload hidden in them.
    • Python
    • Textual
    • Rich
    • Click

What I work with, and where it shows

  • 01Capability

    Backend services and APIs

    • Python
    • FastAPI
    • Uvicorn
    • REST
    • SSE streaming
    • Docker
    • PHP
  • 02Capability

    Web security and privacy analysis

    • Playwright
    • Chrome DevTools Protocol
    • TLS fingerprinting
    • curl_cffi
    • httpx
  • 03Capability

    Text and Unicode forensics

    • Unicode
    • Bidi
    • Homoglyphs
    • Zero-width chars
  • 04Capability

    Developer tooling and linters

    • TypeScript
    • Node.js
    • ESLint plugins
    • GitHub Actions
    • Vitest
  • 05Capability

    Terminal and desktop apps

    • Textual
    • Rich
    • Click
    • PySide6
  • 06Capability

    Interactive web, 3D and games

    • Next.js
    • React
    • three.js
    • Electron
    • Canvas
    • Web Audio
    ProofKorbaj

Tell me what you need

I'm writing about

This opens your email app with the message filled in. Nothing is stored on this site.