Justin Tan
Hi, I'm a Computer Science graduate at Multimedia University. I've interned as a software engineer at Boostorder.
At university, I helped organize Tech Career Days and CodeNection with IT Society, conducted a web security workshop, among other things.
These days, I build fullstack apps, applied AI workflows, occassionally compete in hackathons / CTFs / game jams, and contribute to open-source projects on GitHub.
Featured Projects
View all →AI Pentester
An autonomous penetration testing platform combining Mastra agent orchestration, deterministic ScopeGuards, contract-driven tool abstraction, and a forensic investigative workbench.
- TypeScript
- Mastra
- SvelteKit
- PostgreSQL
- Docker
Candles Out
A chaotic 2-player multiplayer survival shooter where living candles fight monsters, manage stamina, and wield unpredictable power-ups. A fun, short party game. Inspired by Vampire Survivors.
- Godot
- Survival
- Shooter
- Action
- Multiplayer
Let It Cook
A real-time strategy game where you act as a fire deity spreading fire through settlements while managing wind, embers, and firefighters. You create disasters for fun.
- Godot
- RTS
- Strategy
- Physics
Safe Selangor
An AI-powered urban safety platform combining open government data, Crawl4AI web scrapers, and Gemini image verification.
- Next.js
- Fastify
- Supabase
- Gemini
- Crawl4AI
Smart AI Ticket Management System
An enterprise-grade IT helpdesk system featuring zero-auth token tracking, dual-stage Gemini AI triage, dynamic QA health checklists, and 3-way closed-loop verification.
- Python
- Flask
- SQLAlchemy
- Docker
- SQLite
Watchless
A local-first terminal app that converts long-form YouTube videos into canonical transcripts and grounded AI summaries using local Whisper models for speech recognition, stream-buffered TUI, and map-reduce LLM orchestration.
- TypeScript
- Node.js
- Whisper.cpp
ZT Suite
An end-to-end zero-trust demonstration combining endpoint posture verification, MFA access gates, CICFlowMeter runtime pipelines, and ML flow anomaly detection.
- Zero-Trust
- FastAPI
- React
- Machine Learning
- Python
My Writing
View all →How to Remote Control AI Agents On Your Phone
Aug 9, 2026A guide to running AI agents on your phone using Tailscale, OpenSSH, and Termius.
Pi Coding Agent Setup: Browser Automation and Subagents
Aug 8, 2026What a frontier coding agent setup looks like.
Repair a Corrupted ELF and Reverse RC6
Jan 3, 2026A CTF writeup about repairing a corrupted ELF binary and recovering a flag with RC6 analysis.
Custom VM Reverse Engineering
Jan 3, 2026A CTF writeup about reconstructing a custom virtual machine and extracting its flag from bytecode.