Offensive & Defensive Security Pen Testing, Exploit Dev, Malware Analysis, and SOC/IR Practices. Skilled in Python, Bash, and low-level assembly on Linux. Passionate about building, breaking, and defending systems.
I’m a junior cybersecurity professional with hands-on experience in both red team and blue team practices. On the offensive side, I’ve built and used tools like port scanners, sniffers, ARP spoofing and detection, IDOR checkers, brute forcers, and reconnaissance utilities. I’ve also written custom encrypted bind/reverse shells, shellcode for Linux, and explored malware techniques and exploit development including buffer overflows. On the defensive side, I’ve developed tools for ARP spoof detection, DDoS detection and blocking, log analysis, and incident investigation scripts. This blend of skills gives me a strong understanding of how attacks work and how to defend against them.
Fast TCP/UDP probing with banner grabs, CIDR sweep, and JSON summaries. Built for speed and clarity during engagements.
Linux shellcode experiments with simple encoders/decoders and staged payloads for controlled lab use.
Parameter discovery, access checks, and domain busting to quickly spot authorization gaps and hidden routes.
Detects table anomalies and sniffs for suspicious flows; helpful for blue-team practice and demos.
Web app testing, network assessments, and mobile testing. Found IDOR, SQL injection, sensitive data exposures, and directory listing issues. Worked both individually and in a team.
Focus on web applications, recon, and validation of remediation steps. Coordinated reports and walkthroughs with stakeholders.
Dedicated to CTFs, labs, and courses: TryHackMe top 1%, personal tooling, and practice in exploit/malware topics. Ready to bring this focus to a full-time role.
Submitted multiple findings (some marked informational). Solved many labs and machines on TryHackMe; consistent top 1% performance.
Reach out for roles, collaborations, or security testing engagements.
All security work is performed ethically and only with proper authorization.