Independent security researcher and Computer Science student focused on vulnerability research, adversary infrastructure tracking, and practical defensive systems engineering.
Documented research dissecting real-world vulnerabilities and adversary exploitation tradecraft.
Identified and responsibly disclosed 3 chaining vulnerabilities across web and mobile systems:
Investigated illicit attacker exploitation of platform wallet balances, tracing anomalous redemption patterns involving agent accounts and submitting forensic findings.
Conducted external vulnerability research identifying flaws across enterprise attack surfaces for Marks & Spencer (London), Cadbury, and Clovia.
Investigated underground carding schemes driving chargeback penalties on Stripe and tracked Telegram cybercrime groups exploiting Flipkart PayLater.
Engineering systems with deep architecture case studies.
An open research repository tracking APT42, an Iranian state-linked cyber espionage threat group, organizing reported TTPs and mapping observed behavior to the MITRE ATT&CK framework.
A computer vision and interpretability project using PyTorch, ResNet18, and Grad-CAM to inspect neural network decision boundaries and explain classification features.
A desktop attendance recording application using OpenCV for live video feed capture, pyzbar for QR barcode decoding, and SQLite for structured local record persistence.
An interactive cybersecurity research publication examining smart home IoT attack surfaces, protocol weaknesses, real-world botnet propagation, and practical defensive configurations.
Formally accredited credentials in threat management and systems security.
Focusing on passive DNS churn, Certificate Transparency ingestion, and active JARM TLS fingerprinting to identify adversary staging infrastructure before weaponization against defenders.
Monitoring append-only CT log tails and DNS record changes to detect staging domains minutes after issuance.
Active scanning with probe packets to cluster default C2 listener configurations across disparate IP addresses.
Aligning documented attack flows, RAT behaviors, and phishing infrastructures directly to Enterprise techniques with source traceability.
Dossiers investigating threat actor tradecraft and TTPs.
An analytical breakdown of documented APT42 infrastructure staging, typosquatted domain registrations, and reverse-proxy credential harvesting kits.
A technical investigation into the operational architecture of IoT botnets, examining how modern malware families evolved from simple Telnet dictionary attacks to weaponized 1-day CVE exploitation.
How passive DNS, Certificate Transparency logs, JARM fingerprints, and HTTP response clustering enable threat analysts to identify adversary infrastructure prior to weaponization.
Documenting the milestones across independent research and engineering.
Certified in cybersecurity fundamentals, threat management, risk mitigation, network security, and incident response (Credential ID: RWWJDZ1SWMVE2HMJ).
Published analytical dossiers mapping APT42 infrastructure and analyzing Tor-based threat actor staging environments.
Released comprehensive interactive analysis on smart home attack surfaces, Mirai botnet derivatives, and IoT CVE registries.
Identified and helped patch high-impact vulnerabilities across Bewakoof (IDOR, OTP bypass, account takeover), RedBus wallet abuse, Clovia, Marks & Spencer (London), and Cadbury.
Direct discussions on threat intelligence methodologies, adversary tracking, or systems engineering.