Breaking web applications, one assumption at a time.
- 🔐 Cybersecurity enthusiast focused on Web & Network Security
- 🧪 Strong hands-on experience with labs, attack simulations & system hardening
- ⚡ Interested in SSRF, IDOR, RCE, Privilege Escalation
- 🧩 Approach: Understand systems deeply → break them → secure them
- 🌐 Web Application Security Testing (VAPT)
- 🔍 Reconnaissance & Attack Surface Mapping
- 🧪 Exploit Development & PoC Creation
- 🛡️ Linux System Hardening & Secure Configurations
- 📡 Network Analysis & Traffic Inspection
- Built a multi-node lab using Hyper-V
- Simulated real-world attack scenarios (Kali vs Metasploitable2)
- Configured network isolation to prevent traffic leakage
- Implemented system hardening (SSH keys, UFW, non-root access)
- Designed intentionally vulnerable environment for hands-on exploitation
- Practiced web attacks using Burp Suite (interception & manipulation)
- Integrated credential extraction challenges (Hashcat, Steganography)
- Simulated privilege escalation paths and misconfigurations
- Applied Linux system hardening techniques
- Secured environments using firewall rules (UFW)
- Configured secure authentication mechanisms (SSH key-based access)
- 🔍 Advanced Bug Bounty Hunting
- ⚡ Exploit chaining (multi-step vulnerabilities)
- 🧠 Deep dive into API Security & Logic Flaws
- 🛡️ Blue Team basics (SOC workflows & detection)
- 🛡️ Certified SOC Analyst (CSA)
- 🔐 Certified in Cybersecurity (ISC2)
- 🧪 TryHackMe – Jr Penetration Tester Path
"Security is not about tools. It's about understanding systems well enough to break assumptions."