I've rooted Android systems, bypassed WAFs, escalated to root on insane-difficulty HackTheBox machines — and I'm still in my diploma year.

I am a Cybersecurity Professional building the skills to engineer secure, zero-trust architectures. I specialize in penetration testing, vulnerability assessment, and SIEM-based threat monitoring. I believe in learning by doing — not just reading about attacks, but executing them in labs, CTFs, and real enterprise environments where the pressure is real.

• 🛡️ Security Focus: Penetration Testing, Vulnerability Research, SIEM Threat Monitoring, and Open Source Intelligence (OSINT).
• ⚛️ Research & Interests: Deeply interested in Quantum Security, Post-Quantum Cryptography, and future-proofing data ecosystems.
• 🚀 Tooling Developer: Creator of TDE-Tool, an open-source data encryption utility published on PyPI for developers and security professionals.
• 🎯 Open To: Cybersecurity Engineering Roles, Vulnerability Research, and Blue Team Operations.

December 2025 - May 2026

• Led a system hardening project using CIS-CAT Assessor, achieving a 43% compliance increase by classifying vulnerabilities and implementing fixes against real-world threats (e.g., ransomware).
• Executed a full-cycle medium-difficulty penetration test on HackTheBox, utilizing Burp Suite and developing custom scripts for RCE and root privilege escalation.
• Independently competed in an official CTF, solving complex challenges across Web Exploitation, Cryptography, and Forensics.
• Solved an insane-difficulty HackTheBox machine by developing advanced custom exploits, including a WAF bypass for SSRF and a buffer overflow payload for root escalation.
• Secured a Docker environment by demonstrating a critical container escape vulnerability and enforcing hardening best practices (read-only filesystems, Least Privilege).
• Simulated and defended against an Active Directory Kerberoasting attack, applying blue team controls like AES encryption for verification.

Vulnerability Scanning Exploit Development Docker Security Active Directory Compliance Assessment

February 2026 - March 2026

• Deployed and validated granular network security controls using UFW and Wireshark to confirm 100% rule enforcement.
• Manually exploited and documented critical web vulnerabilities (SQLi, XSS, CSRF) using OWASP ZAP and suggested mitigation steps.
• Reduced attack surface exposure by mapping all externally facing endpoints and validating input sanitization controls.
• Authored detailed vulnerability reports following the OWASP Top 10 framework, mapping each finding to business impact and fix priority.

Network Security OWASP Top 10 Wireshark Traffic Analysis Vulnerability Reporting

July 2025 - August 2025

• Conducted multi-stage web application penetration tests, successfully exploiting SQL Injection and XSS against OWASP Top 10 vulnerabilities.
• Executed comprehensive reconnaissance on a corporate domain, utilizing OSINT to map the attack surface and identify critical subdomains.
• Leveraged specialized tools (e.g., sqlmap, Burp Suite) to exploit vulnerabilities and document the entire attack chain with detailed remediation steps.

Web App Pentesting OSINT Reconnaissance Attack Chain Mapping Burp Suite

Learning: Post-Quantum Cryptography, Quantum Security Algorithms
Building: Open-Source Security Tools (TDE-Tool on PyPI)
Exploring: Active Directory Kerberoasting Defense, Web Exploitation
Open To: Cybersecurity Engineering Roles, Vulnerability Research, Blue Team