I'm an offensive security professional based in Chennai, India, specialising in penetration testing, Active Directory attacks, web application security, and privilege escalation.

I started my career in information security in 2017 at Iopex Technologies, then moved to Infosys Ltd. In 2019, a serious family medical crisis required me to step away from formal employment to become the primary caregiver and manage our family business full-time.

I never let go of cybersecurity. While managing those responsibilities, I kept studying — methodically and consistently. I saved money specifically to self-fund my OSCP+ preparation, built 2,600+ structured personal notes, completed 80+ full machine exploitation chains, and passed the OSCP+ examination in November 2025.

I'm not a career changer. I'm a security professional who faced a hard chapter, never walked away from the field, and came back with proof.

💼 Actively seeking Penetration Tester / VAPT Consultant roles — open to Chennai, remote, and international relocation with sponsorship.

During the independent research period:

• Completed 80+ full machine exploitation chains across OffSec Proving Grounds and TryHackMe — each documented end-to-end
• Compiled 2,600+ structured personal notes into a public penetration testing reference across 12 attack categories
• Built a custom local Active Directory lab (DC01 Windows Server 2025 + MS01 + MS02 Windows 11) for hands-on AD attack practice
• Earned OSCP+ — a 24-hour hands-on practical examination with no multiple-choice elements and no partial credit

Complete Active Directory penetration testing reference — full attack chain from zero credentials to Domain Admin, built from real lab practice across HTB, TryHackMe, and a custom local AD lab.

Also includes:

• Machine writeups — HTB Forest, Active, Sauna · THM Attacktive Directory, Enterprise
• Custom Python scripts — BloodHound collector, safe password spray tool
• Full local lab setup — DC01 (Windows Server 2025) + MS01 + MS02 (Windows 11)
• MITRE ATT&CK mapped throughout

Complete web application penetration testing reference — methodology-driven, aligned with OWASP Top 10:2025 including both new categories added this cycle.

80+ OSCP-style machine writeups — full exploitation chains from enumeration to root/SYSTEM proof.

Every writeup follows a strict methodology:

Enumeration → Service Analysis → Initial Access → Privilege Escalation → Proof

A complete offensive security reference — compiled from 2,600+ personal notes during OSCP preparation. Structured for real engagement use, not just exam revision.

Exploitation & Enumeration Nmap Rustscan Burp Suite ffuf Gobuster Feroxbuster Metasploit msfvenom

Active Directory BloodHound Impacket Netexec Rubeus Mimikatz Evil-WinRM Certipy

Web Application Security SQLi SSTI XXE LFI/RFI File Upload Bypass JWT Attacks IDOR SSRF OWASP Top 10:2025

API Security BOLA BFLA Mass Assignment GraphQL Testing REST API Testing

Vulnerability Management Nessus Qualys CVSS Scoring CIS Benchmark (L1/L2) Remediation Reporting

Privilege Escalation WinPEAS LinPEAS GTFOBins LOLBAS

Pivoting & Tunnelling Ligolo-ng Chisel SSH Port Forwarding netsh

Password Attacks Hashcat John the Ripper Hydra CrackMapExec

Scripting Python Bash PowerShell

Platforms Kali Linux OffSec Proving Grounds TryHackMe HackTheBox

TARGET
  │
  ├─ 01. RECON ──────────── nmap / rustscan → open ports + service versions
  │
  ├─ 02. ENUMERATE SERVICES
  │      ├─ SMB 445 ──────── null session → shares → RID brute → hashes
  │      ├─ HTTP 80/443 ─── whatweb → dir bust → app fingerprint
  │      ├─ SSH 22 ─────────  key enum / brute
  │      ├─ MSSQL 1433 ───── xp_cmdshell
  │      ├─ NFS 2049 ──────── showmount → no_root_squash
  │      ├─ LDAP 389 ──────── anonymous dump → users
  │      └─ SNMP 161 ──────── community string → info leak
  │
  ├─ 03. WEB ATTACKS (if HTTP)
  │      ├─ Dir bust → ffuf / gobuster / feroxbuster
  │      ├─ SQLi → sqlmap / manual
  │      ├─ LFI → log poisoning / php wrappers
  │      ├─ File upload bypass → webshell
  │      ├─ SSTI → RCE
  │      ├─ API → BOLA / BFLA / mass assignment
  │      └─ CMS → wpscan / joomscan / droopescan
  │
  ├─ 04. POST-EXPLOITATION
  │      ├─ [Linux]   linpeas → sudo -l → SUID → cron → writable files → ROOT
  │      ├─ [Windows] winpeas → whoami /priv → services → SeImpersonate → SYSTEM
  │      └─ [AD]      BloodHound → Kerberoast / AS-REP → ADCS → PTH → Domain Admin
  │
  └─ 05. PIVOT (if multi-network)
         └─ Ligolo-ng → new subnet → repeat from step 01

I'm actively looking for Penetration Tester / VAPT Consultant roles — open to Chennai, remote, and international relocation with sponsorship. If you're a recruiter or hiring manager, feel free to reach out directly.