Breaking web applications, one assumption at a time.
- 🔐 Cybersecurity enthusiast focused on Web & Network Security
- 🧪 Strong hands-on experience with labs, attack simulations & system hardening
- ⚡ Interested in SSRF, IDOR, RCE, Privilege Escalation
- 🧩 Approach: Understand systems deeply → break them → secure them
- 🌐 Web Application Security Testing (VAPT)
- 🔍 Reconnaissance & Attack Surface Mapping
- 🧪 Exploit Development & PoC Creation
- 🛡️ Linux System Hardening & Secure Configurations
- 📡 Network Analysis & Traffic Inspection
- Built a lightweight JS scanner in Go to optimize local recon and faster triage.
- Identifies hardcoded secrets, risky client-side sinks, prototype pollution patterns, and GraphQL clues.
- Maps basic source-to-sink flows and features both a CLI and local Web UI.
- Developed utilizing only the standard library for maximum speed and zero-dependency execution.
- 🔗 Check out Peelr
- Built a multi-node lab using Hyper-V
- Simulated real-world attack scenarios (Kali vs Metasploitable2)
- Configured network isolation to prevent traffic leakage
- Implemented system hardening (SSH keys, UFW, non-root access)
- Designed intentionally vulnerable environment for hands-on exploitation
- Practiced web attacks using Burp Suite (interception & manipulation)
- Integrated credential extraction challenges (Hashcat, Steganography)
- Simulated privilege escalation paths and misconfigurations
- Applied Linux system hardening techniques
- Secured environments using firewall rules (UFW)
- Configured secure authentication mechanisms (SSH key-based access)
- 🔍 Advanced Bug Bounty Hunting
- ⚡ Exploit chaining (multi-step vulnerabilities)
- 🧠 Deep dive into API Security & Logic Flaws
- 🛡️ Blue Team basics (SOC workflows & detection)
- 🛡️ Certified SOC Analyst (CSA)
- 🔐 Certified in Cybersecurity (ISC2)
- 🧪 TryHackMe – Jr Penetration Tester Path
"Security is not about tools. It's about understanding systems well enough to break assumptions."