┌─[venu@kali]─[~]
├── $ whoami
│ → security researcher · bug bounty hunter · tiruvannamalai, india
│
├── $ ls ~/arsenal/
│ → ssh-bruteforce/ # multi-threaded SSH auth testing (paramiko)
│ → Portscanner/ # custom TCP port scanner (socket)
│ → recon/ # subdomain enum + WHOIS (sublist3r)
│ → full-recon/ # recon pipeline: subfinder → httpx → nuclei
│ → keylogger/ # input monitoring tool (pynput)
│ → JSScope/ # JS endpoint extractor for webapp recon
│
├── $ cat /etc/targets
│ → HackerOne · Bugcrowd · Web Apps · APIs
│
└── $ echo $STATUS
→ hunting bugs · writing exploits · automating recon
offensive_tooling:
python:
- ssh-bruteforce # paramiko + threading
- Portscanner # raw socket scanning
- recon # sublist3r + whois + requests
- keylogger # pynput keystroke capture
- JSScope # JS file endpoint extraction
bash:
- full-recon # subfinder → httpx → waybackurls → nmap → nuclei
current_focus:
- 🎯 Hunting web app & API vulnerabilities
- 🔗 Chaining recon tools into automated pipelines
- 🕵️ OSINT & subdomain enumeration at scale
- 📡 Leveling up in SOC & threat analysis
- 🔴 Studying red team fundamentals
platforms:
hackerone: venu-sh
bugcrowd: venu-sh
philosophy: >
Break it, report it, fix it.
No harm — just protection. |
| Domain | Skill | Level |
|---|---|---|
| 🐍 | Python Offensive Tooling | |
| 🌐 | Web App Security | |
| 📜 | Bash / Shell Automation | |
| 🔍 | Recon & OSINT | |
| 🔗 | Tool Chaining & Pipelines | |
| 🌍 | Networking & Port Scanning | |
| 🛡️ | SOC & Threat Intel | learning |
| 🔴 | Red Teaming | learning |
╔══════════════════════════════════════════════════════════════╗
║ ║
║ "The quieter you become, the more you are able to hear." ║
║ — Kali Linux ║
║ ║
╚══════════════════════════════════════════════════════════════╝