Offensive security practitioner (BCA graduate) with hands-on experience across the full attack lifecycle — reconnaissance, exploitation, and post-exploitation — and blue team proficiency in SIEM-driven detection and incident response. EC-Council CSA certified. Led an independent VAPT engagement on Calicut University's web infrastructure, uncovering injection and authentication flaws with a client-ready report. Builds security tooling in Python/Go, including a recon framework and OSINT suite, alongside reverse engineering work in Ghidra and YARA.
| # | Phase | Attack / Technique | Tool | Outcome |
|---|---|---|---|---|
| F-01 | Recon | Network & Service Enumeration | nmap -sV -sC -A | Services & OS Fingerprinted |
| F-02 | Recon | Directory & Endpoint Discovery | Dirb + Gobuster | Hidden Paths Uncovered |
| F-03 | Exploitation | SSH Credential Brute Force | Hydra | Valid Credentials Obtained |
| F-04 | Exploitation | DVWA Web Login Brute Force | Hydra | Authentication Bypassed |
| F-05 | Exploitation | SQL Injection — Manual + Blind | Manual + SQLmap | Database Contents Extracted |
| F-06 | Exploitation | XSS — Reflected & Stored | Browser + Curl | Scripts Injected & Confirmed |
| F-07 | Exploitation | Malicious File Upload + Shell | Metasploit / PHP | Reverse Shell Payload Uploaded |
| F-08 | Exploitation | Reverse Shell — Remote Access | Netcat | Interactive Shell Established |
| F-09 | Post-Exploit | Local Privilege Escalation | LinPEAS + GTFOBins | Root Access Achieved |
| F-10 | Post-Exploit | Persistence Mechanisms | Crontab + SSH Keys | Persistent Access Maintained |