I'm a 17-year-old high school student in NYC who breaks things to understand them. Security analysis, reverse engineering, and full-stack builds, plus live games that have reached 78M+ player visits. Interested in CS, ML, and neuroscience.
An experiment that drives a diffusion model with only knobs mapped to real brain variables like sensory precision and cortical gain, then tests whether the visual sequence reported in DMT research (geometry, then forms, then figures) emerges on its own. Nothing is drawn by hand, the metrics were locked in before the first run, and the write-up reports what never showed up alongside what did.
A platform for distributors and the resellers beneath them, where each side logs into its own scoped portal, with inventory tracking, bulk pricing tiers, and a sales-and-revenue dashboard.
A Claude Code plugin that finds the private API behind a web app you are signed into, using your own browser session, and builds a small automation program and a slash-command plugin for that site. Requests are paced and every call that changes data waits for your approval.
A local viewer that turns raw Claude Code JSONL logs into readable conversations, grouping subagents and workflow runs as they actually happened. It follows live transcripts over SSE, all from one dependency-free Python file and a single HTML page.
A VS Code extension that turns the Explorer sidebar into a command workbench: one-click shell tasks with live status you can stop mid-run, background servers and watchers included. Everything lives in a plain JSON file, so your whole team's tasks ride along in version control.
Extensions I wrote for my own Spotify on the Comfy theme, starting with a fix for the layout a Spotify update broke. The album cover tints the whole app and spins as a disc that pulses on the beat, and I profiled the client over DevTools to bring that disc from half a CPU core down to 13%.
A top-down zombie survival shooter my team built for AP CSP on Python's Arcade library, where I led the coding, and our school's entry at the annual arts event. You hold to spray down zombies that keep spawning across a trashed wasteland, with a layered audio engine and a saved best score.
I pulled apart the game Rivals to find weaknesses in its anti-cheat, combat, and rendering. Everything was reported to the developers before I made any of it public.
A Discord bot for tracking balances, debts, and inventory, driven by slash commands and buttons, with a full history you can filter and export.
A Discord library I built from scratch, talking straight to Discord over WebSockets and HTTP instead of leaning on existing wrappers. It handles the connection, sessions, and events all on its own.
A walkthrough of the eight positions of salah in the order they happen, live at sujood.online. Each stage carries the Arabic, the transliteration, and a play button that streams the actual recitation, so you can hear a line instead of guessing at it from spelling.
This site. No frameworks, just plain JavaScript, including a terminal you can actually type into with 35+ commands, and the animated circuit board running behind everything.
Public high school focused on arts, technology, and programming. Scored 4s on the AP Computer Science Principles, Precalculus, and US History exams. 122 Amsterdam Ave, NY.
FutureReady NYC dual enrollment. Finished CSC 101, Principles of Information and Computer Science, with a 100. 199 Chambers St, NY.
Research, internships, or a project worth building. If it involves breaking things, building things, or both, I want to hear about it.
Mahfuj Mustafa is a student developer and security analyst in New York City. Mahfuj is in the class of 2027 at the High School of Arts and Technology and takes college courses at the Borough of Manhattan Community College through FutureReady NYC dual enrollment. From 2024 to 2026 Mahfuj programmed live operations at Merge Box, shipping and maintaining Roblox games with more than 78 million combined player visits. Through the NYC DOE Workplace Challenge Program, Mahfuj helped build a security strategy for the LinkNYC public Wi-Fi network in a six-week team challenge. Projects here include Allusion, security research into the game Rivals that was reported to its developers before going public, Psychedelic Model, an ML and neuroscience experiment built on a diffusion model, and developer tools such as Inspect Workflow and Taskbench. Interests: computer science, machine learning, and neuroscience.