Skip the game: open the quest log
▲ An open-world portfolio
HamdiAwad
Security-focused developer. Explore five zones of real work, led by Sentinel, malware detection from the Windows kernel to a hardened sandbox, plus the web, mobile and systems projects around it.
Loading world0%
Tip Every quest is a real project. Private repos are marked, and demos are available on request.
5 zones · 23 quests · 52 repositoriesArt by KitBitz (CC0) · three.js + GSAP
Hamdi Awad · Security-focused developer
How would you like to see the work?
You can switch between them at any time.
Hamdi Awad, full-stack developer
Shopify apps, Next.js platforms, Flutter apps, kernel drivers and compilers.
Projects
- Wasl (Web & Commerce, 2026): InstaPay payments inside native Shopify checkout. Shopify only lets Plus stores add a custom payment gateway, so Wasl works with a manual payment method and checkout UI extensions. The customer uploads their InstaPay receipt on the payment step, and the merchant reviews it in an embedded admin queue before the order is marked paid.
- El Dayra (Web & Commerce, 2025–26): A bilingual store for an Egyptian party card game. Arabic-first storefront and admin dashboard: an animated deck, a cart with promo codes, cash on delivery with fees by area, and order, product and sales management for the client. Live: El Dayra
- Sahel (Web & Commerce, 2026): A full storefront on the Shopify Storefront API. Collections, variant-aware product pages, predictive search, a real Shopify cart through Server Actions, and a one-page checkout with cash on delivery, InstaPay and card. English and Arabic with a full right-to-left layout. Live: Sahel
- LearnHub (Web & Commerce, 2025–26): Free lectures, organised into real courses. Students follow an ordered path of embedded lectures, take graded quizzes and earn a certificate with a public verification page and PDF. Instructors build courses from YouTube links; admins see enrolment trends, publish courses and manage roles. Live: LearnHub Code: LearnHub
- CampusBites Web (Web & Commerce, 2025–26): The site and every dashboard behind campus food ordering. A bilingual English and Arabic Next.js site with dashboards for vendors, university admins and the platform team. The public demo runs on seeded data, and new orders land on the vendor's board in real time. Live: CampusBites Web Code: CampusBites Web
- CampusBites Apps (Apps & Real-time, 2025–26): Three Flutter apps for ordering food on campus. Students order and pay from campus vendors, vendors run a live order queue, and university admins manage accounts. Shared packages hold the models and UI, and a Firebase emulator demo runs everything on seeded data. Two REST backends came first: Express with Firebase, then Appwrite. Code: CampusBites Apps
- Epic Trivia Battle (Apps & Real-time, 2024–26): Trivia for up to eight friends in one room. Room codes, synced timers, speed-based scoring, streaks, a live leaderboard and a podium. The live version runs peer-to-peer over WebRTC: the host's browser runs the game and everyone connects to it. Live: Epic Trivia Battle Code: Epic Trivia Battle
- BrainFuel (Apps & Real-time, 2025): The first version of CampusBites, built by a team of five. A Flutter and Firebase food-ordering app for our university, with its own REST API for roles, vendors and orders. It became the starting point for CampusBites.
- Chatter (Apps & Real-time, 2024–25): Contacts, channels and direct messages over Socket.IO. An Express and MongoDB server with authentication, contacts, channels and message history, and a React client that updates live over Socket.IO. Code: Chatter
- NilePlateID (AI & Data, 2025): Egyptian licence-plate recognition, end to end. YOLOv11 finds cars and plates, a custom YOLO OCR model reads the Arabic plate characters, and a re-identification model follows the same car across cameras, all behind a Streamlit app. Live: NilePlateID Code: NilePlateID
- EN→ES Translation Benchmark (AI & Data, 2025): Four translation architectures, one test set. RNN, LSTM and GRU models with attention, measured against a Transformer on English to Spanish with BLEU: 50.1 for the Transformer against 24.1 for the best recurrent model. The winner ships behind a Dockerised FastAPI service. Code: EN→ES Translation Benchmark
- Anti-Sleep Driver Assist (AI & Data, 2025): Drowsiness alerts from a camera and an ESP32. Face and eye detection feeds a TensorFlow Lite eye-state model. When a driver's eyes stay closed, the laptop raises an alert and an ESP32 drives an LED and a buzzer over serial.
- Credit Card Fraud Detection (AI & Data, 2025): Finding the fraud in 10,000 card transactions. Exploration, resampling for the rare fraud class and classification models in scikit-learn, with a Streamlit dashboard that compares the models and queries the data in MongoDB. Code: Credit Card Fraud Detection
- Student Success Study (AI & Data, 2024): What actually predicts a student's grades? Exploratory analysis and hypothesis tests on secondary-school data, then classification and regression models with scikit-learn and XGBoost, written up in a full report. Code: Student Success Study
- Sentinel (Security, 2025–26): Hybrid ML malware detection, from a Windows kernel minifilter to a hardened sandbox. A kernel-mode minifilter reports every file create, open and write to user mode. Executables and DLLs are queued over a named pipe, parsed, and scored by a LightGBM model trained on EMBER2024. Anything suspicious is detonated in a CAPEv2 sandbox disguised as a real laptop, where a second model reads its behaviour, and a policy engine maps the verdict to allow, warn or quarantine.
- Encryption Algorithms GUI (Security, 2025): Sixteen ciphers and hashes in one desktop app. From Rail Fence and Playfair to DES and AES, MD5 to SHA-512, plus Euclid's algorithms, with key generation and character-frequency analysis in a PySide6 interface. Code: Encryption Algorithms GUI
- SealedSecrets Re-encryption (Security, 2025): One command to re-encrypt every Kubernetes secret. A design proposal for a kubeseal reencrypt-all command that finds every SealedSecret in a cluster, re-encrypts it with the latest key, updates it in place and reports what changed.
- Distributed Auction (Systems, 2026): Live bidding that survives a crashed server. Three replicated peers behind a name service: Lamport clocks order every bid, Ricart–Agrawala guards writes, and heartbeats trigger failover and re-election. The explainer runs a port of the real peer logic in the browser, with a sandbox you can crash. Live: Distributed Auction Code: Distributed Auction
- StudyOS (Systems, 2025): A tiny educational OS in C and Bash. A Linux-based study environment with a Pomodoro timer, an ambient sound player, a GPA calculator over shared memory, a threaded assignment manager and an ncurses interface. Code: StudyOS
- Tiny Language Compiler (Systems, 2025): A scanner and parser for the TINY language. Written in C: the scanner turns source code into tokens, and the parser applies the grammar and draws the syntax tree, with an optional Python GUI. Code: Tiny Language Compiler
- Daemon Manager (Systems, 2024–25): Start, watch and signal daemons from one tool. A Bash interface over a C signal handler: create and monitor daemon processes, send signals, follow their logs and export process data as JSON. Code: Daemon Manager
- Railway Booking System (Systems, 2024–25): Train tickets with route search and seat allocation. Python and MySQL behind a Tkinter app: a depth-first search finds stations reachable within 24 hours, seats fill coach by coach, and passwords are salted and hashed with SHA-256. Code: Railway Booking System
- Campus Network Design (Systems, 2025): A routed network built in Cisco Packet Tracer. Three routers running RIP, DHCP handing out addresses, and switches and PCs across several subnets. Code: Campus Network Design