Cybersecurity Researcher specializing in SIEM-based threat detection, Linux security monitoring, and web, Android & Linux penetration testing. Experienced in developing custom detection rules using Wazuh and mapping alerts to MITRE ATT&CK.
I am a Cybersecurity Researcher, VAPT Specialist, and Security Analyst with a strong focus on Penetration Testing. I specialize in identifying and exploiting vulnerabilities across web applications, Linux systems, Android platforms, and Active Directory environments.
I have hands-on experience conducting security assessments using tools such as Burp Suite, Nmap, Metasploit, SQLmap, Hydra, and Wireshark, with a solid understanding of OWASP Top 10 vulnerabilities and real-world attack methodologies. I regularly simulate attacks including brute-force, privilege escalation, and network reconnaissance to assess and strengthen system security.
In addition to offensive security, I work with SIEM tools like Wazuh and Splunk to analyze attack patterns and map them to the MITRE ATT&CK framework — enabling me to approach security from both attacker and defender perspectives.
I have built and tested multiple lab environments and security projects, including web exploitation scenarios, SSH brute-force detection, network intrusion detection using Suricata, File Integrity Monitoring (FIM), and Active Directory infrastructure with enforced security policies. I also create custom CTF challenges, such as OTP bypass scenarios, to deepen my practical exploitation skills.
With a background in Android and web application development, I understand how applications are built — allowing me to think like a developer while testing like an attacker.
Practical security implementations and research labs.
To-Do List App, built with a stylish UI, welcome screen, task priority, completion tracking, delete/clear options, filters, and interactive sound effects.
Get APK
Developed MailboxIntel, a web-based email security analyzer for phishing detection and threat scoring.
Visit WebIntegrated VirusTotal API with Wazuh to automate hash-based reputation checks and trigger high-severity (Level 12) alerts.
View RepoBuilt a solution using Wazuh SIEM to identify repeated failed login attempts.
View RepoCompTIA | Ongoing
Top 10 Position - Offenso Academy
24-Day Challenge Completion
Core Concept Certification
Advanced Technique Mastery
Machine Protection Bootcamp
Bug Hunting Methodology
Windows Exploit Bootcamp
Deep Knowledge Participation