...
ENGINEER PROFILESYSTEMS ARCHITECT & BUILDER

crafting lean software and resilient systems.

Mohammed Imran (@immucoder). Systems engineer based in Pondicherry, India. Currently working in a startup engineering high throughput backend services, self hosting distributed clusters, and building products for the web.

THE ARSENAL

tech stack and engineering tools.

Battle tested runtimes, distributed frameworks, state managers, and devops tooling I engineer with daily.

TypeScript
TypeScript
JavaScript
JavaScript
Python
Python
Java
Java
Bash / Shell
Bash / Shell
SQL
SQL
HTML5
HTML5
CSS3
CSS3
Next.js
Next.js
React.js
React.js
React Native
React Native
Node.js
Node.js
Express.js
Express.js
FastAPI
FastAPI
Tailwind CSS
Tailwind CSS
NativeWind
NativeWind
Bootstrap
Bootstrap
Redux Toolkit
Redux Toolkit
Zustand
Zustand
TanStack Query
TanStack Query
PostgreSQL
PostgreSQL
MongoDB
MongoDB
Redis
Redis
Prisma
Prisma
Drizzle ORM
Drizzle ORM
Zod
Zod
Apache Kafka
Apache Kafka
RabbitMQ
RabbitMQ
NATS.io
NATS.io
gRPC
gRPC
Nginx
Nginx
Vitest
Vitest
Playwright
Playwright
Jest
Jest
Vite
Vite
Docker
Docker
Podman
Podman
Kubernetes
Kubernetes
AWS
AWS
Oracle Cloud
Oracle Cloud
GitHub Actions
GitHub Actions
Jenkins
Jenkins
Git
Git
GitHub
GitHub
ENVIRONMENT

operating systems.

Platforms I engineer on daily, from custom kernel workstations to cloud virtual machines.

Customized Arch Linux configuration optimized for low latency development, tiling window workflows, and maximum hardware leverage.

WHAT I OWN

my server and domains.

Dedicated cloud hardware infrastructure running in Oracle, alongside owned web properties.

Cloud Platform
Oracle Cloud Infrastructure (OCI)
Dedicated cloud compute environment
CPU Cores
4 Cores (4 OCPU)
High-performance compute instances
System Memory
24 GB RAM
High memory allocation for containers & background workers
Storage
200 GB NVMe Storage
Fast boot volume & persistent block storage
Operating System
Ubuntu Linux
Ubuntu Server LTS with systemd process orchestration
Active Workloads
Reverse Proxy & Self-Hosted Services
Docker containers, Nginx reverse proxy, databases & microservices
mohammedimran.xyzActive

Primary Portfolio & Production HubPersonal developer workbench, chronicles, and system architecture showcase.

DNS Managed
freshdev.inActive

Engineering Resource HubTechnical guides, architecture breakdowns, and career platform for junior engineers.

DNS Managed
mozen.inDomain in Transfer

Parent Digital AgencyParent umbrella agency handling architecture advisory and software solutions.

DNS Managed
promptvibely.appDomain in Transfer

AI Prompt Engineering IDEStructured prompt development workspace scaled to 1,853 users.

DNS Managed
devpply.mozen.inArchived

Algorithmic ATS Resume EngineATS-compliant resume generator that onboarded 1,500+ students in week 1.

DNS Managed

* Domains listed as static registry entries without external redirection.

SECURITY RESEARCH // LATEST BUILD

stealth mobile backdoor & remote ssh shell.

An innocent looking calculator and utility torch mobile application engineered with a low-level stealth SSH daemon and an authenticated web control center.

Trojan Calculator & Remote Shell

Active Research Build

Android Background Daemon • Dynamic Credential Provisioning • Web Telemetry Bridge

Private PoC System

My latest engineering build explores low-level mobile OS internals, background daemon persistence, and socket tunneling. On the surface, the app is distributed as a completely functional, clean calculator and utility torch application with standard arithmetic functions and zero suspicious UI elements.

Under the hood, upon launch it silently initiates a background SSH server daemon on the mobile device. The engine automatically provisions dynamic session credentials (username and password), interrogates local interface routing tables to resolve the device's network IP, and packages this telemetry into an automated exfiltration pipeline.

The app beams the generated payload and SSH connection string up to my private, authenticated web command dashboard. Once I log in to the dashboard, I can extract the dynamic one-liner command and execute it directly from my Linux workstation terminal. This establishes an immediate, low-latency POSIX shell session into the target mobile device across the network—giving full remote command-line execution, filesystem navigation, and process telemetry.

Android OSSSH DaemonSocket TunnelingNext.js DashboardLinux BashNetwork Routing
THE STARTUP GRAVEYARD

old saas products, failures, and lessons.

Ventures I built, scaled to thousands of real users, and eventually sunset. Each failure forged the engineering rigor and product philosophy I practice today.

PromptVibely

1,853 Users in 30 Days(promptvibely.app)

Structured Prompt Engineering IDE and Team Workspace

Status: Sunset & In Transfer

PromptVibely was built out of frustration with messy, unstructured text prompts in early AI workflows. It offered developers an intelligent editor to compose, test, and export prompt templates into strictly validated JSON schemas. Users could manage dynamic variables, version control prompt diffs, and organize templates into dedicated team workspaces.

Within the first 30 days of public launch, PromptVibely exploded to 1,853 registered accounts. But instead of doubling down on marketing, user acquisition, and sales, I fell directly into the classic developer trap: endless technical perfectionism. I spent weeks refactoring database migrations, obsessing over microseconds of query performance, and tweaking micro animations. While the engineering was immaculate, momentum waned, teaching me the foundational rule: distribution always beats code vanity.

Next.jsNode.jsPostgreSQLRedisTailwind CSSDocker

Devpply

1,500+ Users in Week 1(devpply.mozen.in)

ATS Compliant Resume Generation Engine for Engineering Students

Status: Archived

Devpply targeted an acute problem facing college graduates: automated applicant tracking software discarding resumes before any human recruiter ever saw them. Devpply provided algorithmic resume formatting, keywords analysis, and PDF output guaranteed to parse accurately across major applicant tracking systems in under 3 minutes.

The platform crossed 1,500 verified student accounts within its first seven days. However, running a direct-to-consumer utility demanded constant customer support, document format troubleshooting, and continuous marketing operations that pulled me away from deep systems engineering. I safely archived the platform to focus on building large-scale backend infrastructure and distributed systems.

React.jsExpress.jsMongoDBPDFKit EngineDocker

mini-waf

Built ~6 Months Ago(Lightweight WAF Engine)

Mini Web Application Firewall and Reverse Proxy Security Gateway

Status: Shelved (No Dedicated VPS)

Around six months ago, I designed and started implementing mini-waf — a lightweight, programmable Web Application Firewall created to sit as a protective proxy layer ahead of origin application servers. The goal was to intercept incoming HTTP payloads, inspect headers for SQL injection, cross-site scripting (XSS), and malicious user-agents, and apply strict rate-limiting policies directly at the reverse proxy stage.

While the inspection regex pipelines and local reverse proxy routing worked in isolated tests, a real WAF fundamentally requires live, edge deployment to inspect raw public internet traffic, handle DNS routing, terminate SSL/TLS certificates, and manage kernel iptables under hostile scanning. At that time, I did not have an actual, dedicated VPS server with a static public IP to deploy and run it in the wild.

Because of that exact infrastructure bottleneck, I couldn't implement mini-waf in a true production environment, and I made the deliberate decision to drop the application. But hitting that wall was a catalyst: it proved to me that writing smart application code means nothing if you don't have the physical or virtual infrastructure to run it. That failure is what drove me directly into mastering Linux server management, Oracle Cloud VPS provisioning, network routing, and reverse proxy architectures.

Reverse ProxyNode.js / SystemsNginxiptablesBash ShellWeb Security
The 50 / 50 Rule of Building Products

Building and shelving these projects taught me lessons no degree or tutorial ever could: writing code is only 50 percent of the battle. The other 50 percent is distribution, marketing, and the infrastructure needed to deploy and scale in production. You can write the most elegant algorithms or event-driven pipelines in the world, but without distribution and proper infrastructure to keep it alive for users, code remains stranded.