$ whoamiOffensive Security, Researcher, Bug Hunter
Hi👋,I'm
I explore the flaws behind how things are built, and research what it takes to secure the environment around them.
01 // about
I look at systems the way an attacker would, so teams can see how they break before someone else does.
Now:Cyber Security Engineer @ QOS Technology Private Limited· since Jun 2025
Web and Android applications, Wi-Fi networks and internal infrastructure, tested the way a real adversary would approach them: from recon to proof of impact.
I study the building blocks defenders rely on and turn what I find into practical guidance. Author of the published paper "Web Vulnerabilities Modulation".
CEH v12 certified, Grand Finalist at the KAVACH national cybersecurity hackathon, and a Gold Medal for academic excellence.
I studied Computer Science with a specialisation in Information Security at Chandigarh University, where I spent more weekends at hackathons than anywhere else, and earned a gold medal for the most participations.
I joined QOS Technology as a Cyber Security Intern in April 2025, and two months later stepped up to Cyber Security Analyst, where I run offensive assessments and security research.
02 // skills
Offensive security across the full stack, from the browser and the phone to the airwaves and the server room.
Adversary emulation that tests people, process and technology together, from initial access to objective.
Finding and proving vulnerabilities in web apps and APIs, beyond what scanners catch.
Static and dynamic analysis of Android apps and the backends they talk to.
Assessing wireless networks for weak configurations, rogue access and credential exposure.
Internal and external network assessments, from reconnaissance to privilege escalation.
03 // journey
Education, competitions, research and work, in the order they happened.
Chandigarh University
Specialisation in Information Security. Received the Academic Excellence Award (Gold Medal) for the most hackathon participations.
EC-Council
Certified in the methodology and tooling of ethical hacking.
KAVACH · Intel oneAPI × IIT Roorkee · Smart India Hackathon
Grand Finalist (top 3) at KAVACH, 5th place at Intel oneAPI × IIT Roorkee, and 2nd Runner-Up at the Smart India Hackathon qualifiers.
ResearchGate
Authored "Web Vulnerabilities Modulation".
QOS Technology Private Limited
Two-month internship in offensive security assessments and security research.
QOS Technology Private Limited
Offensive security assessments and security research.
Next
What's next04 // projects
Tools, research and write-ups I've built along the way.
A single Bash console for a whole Wi-Fi engagement - discover and audit WEP, WPA/WPA2, WPA3-SAE and WPS, run the deauth → handshake capture → offline crack chain, and stand up a vendor-matched evil twin. Authorized testing only.
A short, one or two line summary of what this project does and why it matters.
A short, one or two line summary of what this project does and why it matters.
05 // achievements
Awards
Chandigarh University
Gold Medal, most hackathon participations
Research
ResearchGate · Web Vulnerabilities Modulation
Author
Hackathons
KAVACH National Cybersecurity Hackathon
Top 3 Teams
Hackathons
Intel oneAPI Hackathon × IIT Roorkee
Top 5
Hackathons
Smart India Hackathon Qualifiers
Top 3
Certifications
EC-Council
Certified Ethical Hacker
06 // now
last updated:
Running offensive security assessments and researching new attack surface.
Hunting for vulnerabilities in web applications and APIs.
Turning research and findings into write-ups on this blog and on Medium.
07 // focus
Realistic adversary emulation end-to-end.
Logic flaws and auth bugs that scanners miss.
Android app internals and runtime analysis.
Studying how vulnerabilities emerge from the way systems are built.
08 // roadmap
The goals I'm working towards.
Level up with a hands-on offensive security certification.
Publish follow-up research on web vulnerability patterns.
Release tools that automate parts of my testing workflow.
Grow a track record of responsible disclosures.
09 // blog
ResearchA visual deep-dive into the 9-step agent pipeline - from user prompt to tool execution to final answer - mapping every attack surface, with OWASP references and defense strategies.
ResearchFactories run on radios now: wireless HMIs, PLC bridges and sensor meshes. This is the automation blueprint, where Wi-Fi sits in it, and the attacks that turn a parking lot into a foothold on the plant floor.
ResearchFrom EternalBlue to Stuxnet: why unpatched, outdated systems are the most dangerous machines on any network, and why industry still can't let them go.
10 // contact
Whether it's a pentest, a research collaboration, a bug bounty find or just a conversation about offensive security, my inbox is open.