Projects
webvuln-scanner
CLI that checks security headers, cookie flags and TLS on sites you own and grades them. On the lab targets it gave A to a hardened site and F to a self-signed, old-TLS one.
- Python
- TLS
- HTTP
secure-shortener
URL shortener where every control maps to an OWASP Top 10 category with a named test. A live run blocked the cloud metadata URL with 400 and rate-limited brute force with 429.
- Python
- FastAPI
- SQLite
- pytest
api-qa-suite
Security and functional tests for an API with 6 seeded OWASP API Top 10 defects: 9 tests fail on the vulnerable build, all 28 pass on the fixed one.
- pytest
- schemathesis
secrets-leak-guard
gitleaks config with custom rules for Indian formats such as Razorpay keys and Aadhaar numbers, a pre-commit hook that blocked a staged token, and a history scan that found a secret a later commit deleted. 20 pytest checks pass; the corpus is hand-written, and the README says so.
- gitleaks
- Python
- pytest
vulnops
Merges Trivy, Grype and ZAP output, removes cross-tool duplicates and ranks what is left by CISA KEV, EPSS and CVSS into a static dashboard. On a lab scan 355 raw findings became 185 after dedup.
- Python
- Trivy
- Grype
- OWASP ZAP
More on GitHub
Skills
- Web and API testing: OWASP Top 10 and API Top 10, Burp Suite, IDOR, SSRF, JWT issues, TLS and header review
- Infrastructure: Nmap, Active Directory attacks, Linux and Windows privilege escalation
- Tooling: Python, Bash, JavaScript, pytest, schemathesis
2025 B.E. Information Technology, Sinhgad Institute of Technology & Science (SPPU), Pune, with Honours in Cybersecurity.
Experience
CTF Player and Security Researcher · Hack The Box and TryHackMe
Root Linux and Windows machines on Hack The Box and TryHackMe, including Active Directory attacks and privilege escalation, and write step-by-step reports. Placed 13th in the CloudSEK CTF (Aug 2025); read the writeup.
- Active Directory
- Privilege escalation
- Nmap
- Burp Suite
ServiceNow System Administrator, Virtual Intern · AICTE program
Built ServiceNow ITSM reports and dashboards and completed the CSA labs.
- ServiceNow
Certifications
Certified Ethical Hacker (CEH) Practical
EC-Council · Credential ID ECC9356741028
Certified AppSec Practitioner (CAP)
The SecOps Group · Credential ID 8481909
Other roles: SOC analyst · Cloud security & DevSecOps · DevOps / SRE / NOC · AI security · Software & QA · Security (SOC, VAPT and AI security) · Writing