Security Researcher& Ethical Hacker
I break things for a living — responsibly. I document what I learn in detailed writeups so the next person doesn't have to rediscover the same tricks.
Curious, methodical, a little paranoid
I'm a security researcher and ethical hacker who likes to understand systems by taking them apart. Most of my free time goes into HackTheBox, OverTheWire, and assorted CTFs — with a bias toward web, network, and Linux challenges.
I come from a software-engineering background, which means I think about security the way a builder does: what could I have done to prevent this, and how do I explain it to the team that shipped it? The writeups on this site reflect that — step-by-step, with the reasoning included, not just the commands.
Stack
Writing
Hack The Box Devhub Machine Writeup
HTB MachineComplete walkthrough of the Hack The Box Devhub machine, covering MCPJam Inspector CVE-2026-23744 remote code execution, reverse shell access, Jupyter Lab token extraction, lateral movement to the analyst user, and privilege escalation through a vulnerable root-level operations management script.
Hack The Box Reactor Machine Writeup
HTB MachineComplete walkthrough of the Hack The Box Reactor machine, covering unauthenticated Next.js React2Shell RCE, credential extraction from a SQLite database, MD5 password cracking, SSH lateral movement, and privilege escalation through an exposed Node.js V8 Inspector running as root.
Projects
Subdomain Takeover Scanner
An automated Python utility designed to identify dangling DNS records and misconfigured subdomains vulnerable to takeover attacks.
Certifications
Certified Penetration Testing Specialist (CPTS)
Hack The Box • Upcoming
Education
Under Graduate
Atharva College of Engineering
Contact
Have a security question? Want to collaborate on a project? Or just want to chat about cybersecurity? Feel free to reach out through the form below or connect with me on social media.