Ashish Prajapati
I build products and tools I wish existed.
11 live products · 30+ free browser tools · 8 open-source repos · security research notes. I ship and maintain live apps and make browser tools for everyday development.
Currently building: DatumlyIndia[email protected]
Stacktools and areas I work in
- Frontend
- TypeScript · Node.js · React · Go
- Backend
- Express · Spring Boot · PostgreSQL · Redis
- Infra & security
- Rust · Linux · Git · Web security
Selected work
All projects
DatumlyLive2026 - PresentSample data that feels real — instantly. Production-quality datasets for prototypes, tests, and demos. Deterministic seeds, JSON/CSV/SQL + API. No privacy risk.SaaS · API · JSON · CSV
BuildBazaarLive2026 - PresentFind the project. Build it. Present it. Complete college projects with source code, docs, demos, and setup guides — one payment, instant download.Marketplace · Next.js · Payments
CricbidLive2026 - PresentLive cricket fandom arena — back teams and stars, fight rivalries (Kohli vs Rohit, CSK vs RCB), and climb the all-time pitch leaderboard.Live product · Real-time · Community
Fab UILiveOSS2026 - PresentAccessible React 19 component library with calm design tokens, direct exports, and no CSS-in-JS runtime.React 19 · TypeScript · Accessible UI · Design tokens
HTTPalLiveOSS2026 - PresentA curl-like HTTP client for Node.js with a timing waterfall, watch mode with live diffs, snapshot regression checks, and a built-in web UI.TypeScript · Node.js · CLI · HTTP
Browser tools
All toolsSmall utilities for everyday development. Your data stays in the browser.
Security research
Full snapshotEarly bug bounty work across web applications, APIs, and real-time systems.
47
Reports
3
Confirmed
16
Pending
Informative 8 · Duplicates 12 · Out of scope 1 · Not applicable 7
Writing
All writing- eMudhra Certificate Compromise: What Happened and What You Should DoEight eMudhra intermediate CA certificates were compromised because their private keys were generated with weak cryptographic entropy. Here's what happened, how browser vendors responded, and what it means for website operators and system administrators.Security research · 6 min
- Critical PHP Vulnerabilities Discovered October 2026Three security vulnerabilities fixed in PHP 8.5.12 and beyond — two critical RCE vectors via OOM corruption and stale global state, plus an out-of-bounds read in the HTTP stream wrapper.Security research · 6 min
- A Practical Web Bug Bounty Recon WorkflowA focused workflow for mapping a web target, reducing noise, and validating reports without turning reconnaissance into indiscriminate scanning.Security research · 2 min
GitHub activity
View profile1,666 contributions in the last year
LessMore