I'm a cybersecurity professional with 3.5+ years of experience in offensive security and security research.

My interests include penetration testing, vulnerability research, exploit development and red teaming.

Currently building security tools, researching vulnerabilities, contributing to open-source security projects, and documenting my work.

🔐 Security Research Engineer
🎯 Penetration Tester
🤖 AI / LLM Security
💥 Vulnerability Research & Exploit Development
🐧 Linux & Active Directory
🛠️ Security Tool Development
📚 Continuous Learner

• 🛡️ OSCP Certified
• 🔎 Interested in Web, API, Network & Active Directory Security
• 🤖 Experience with AI Security, Adversarial Testing & LLM Assessments
• 💥 Published conference/journal papers, vulnerability research and exploit PoCs
• 🐙 Open-source security contributor
• ✍️ Technical writer covering cybersecurity and vulnerability research

A collection of Python/Bash utilities for automating common penetration testing and reconnaissance tasks.

• Linux Pentesting Toolkit
  • Helper scripts for automating Linux pentesting tasks
  • Bash

A collection of vulnerability research and proof-of-concept exploit development projects.

• CVE-2026-3576 – Planyo Wordpress Plugin

  • Server-side request forgery leading to local file inclusion
  • Python • PHP • Docker

• CVE-2026-67206 – Wolf CMS

  • Arbitrary file write leading to remote code execution
  • Python • PHP • Docker

• CVE-2026-53959 - 4gaBoards

  • Broken access control leading to mass user information disclosure
  • Python • JavaScript • Docker

A list of my contributions to open source security tools.

• Metasploit
  • Exploit module for local file inclusion vulnerability in a WordPress plugin (CVE-2026-3576)
  • Upstream PR . Under Review
  • **Ruby • Metasploit **

I write about:

• 🔍 Vulnerability Research
• 💥 Exploit Development
• 🌐 Web Application Security
• 🏢 Active Directory
• 🧪 Capture The Flag Challenges
• 🛠️ Security Tool Development

My blogs can be found here

My research has been published at top-tier security conferences and journals.

• An adversarial attack approach for eXplainable AI evaluation on deepfake detection models, Computers & Security, 2024 Link
• GateKeeper: Operator-centric Trusted App Management Framework on ARM TrustZone, IEEE Conference on Communications & Network Security, 2022 Link
• Designing a Text-based CAPTCHA Breaker and Solver by using Deep Learning Techniques, IEEE International Conference on Advances and Developments in Electrical and Electronics Engineering, 2021 Link

Windows Internals
Advanced Web Exploitation
Cloud Security
LLM Security
Malware Analysis
Advanced Active Directory Attacks

⭐ If you find my scripts useful, consider giving them a star!