Cybersecurity analyst and ethical hacker focused on vulnerability assessment, penetration testing, and blue team defence. Building hands-on industry experience through independent security research under SAIZERO — Ground Zero Defence (2024 — Present).
- 🔴 Offensive: VAPT, Web App Security, OWASP Top 10, Android Malware Analysis
- 🔵 Defensive: Wazuh SIEM, Honeypot Deployment, Log Analysis, Phishing Analysis, API Security
- 🤖 Research: ML-based Malware Detection, Network Forensics (Wireshark DPI)
- 🛠 Tools: Kali Linux, Burp Suite, Nuclei, XnLinkFinder, Nmap, Postman, androguard, scikit-learn, Cowrie, Wireshark
| Project | Description | Tools |
|---|---|---|
| NCSA-VDP-Assessment | Passive security assessment under NCSA Bug Bounty VDP — awarded Certificate of Appreciation | Burp Suite, Nuclei, XnLinkFinder, ffuf, Subfinder, curl, whatweb |
| Supply-Chain-Secret-Hunting | Bug bounty research — SSR framework token exposure — passive recon — CWE-798 — HackerOne VDP | curl, Burp Suite, grep, Kali |
| FUTURE_CS_01 | VAPT Report — OWASP Juice Shop — 7 vulnerabilities identified | ZAP, Nmap, Burp, Kali |
| FUTURE_CS_02 | Phishing Detection — 3 real samples — Gmail, Microsoft, XRP scams | Thunderbird, MXToolbox, VirusTotal |
| FUTURE_CS_03 | API Security Risk Analysis — OWASP crAPI — 9 vulnerabilities mapped to OWASP, CVE, MITRE | Postman, jwt.io, Mailhog, Docker |
| SAIZERO-Cowrie-Honeypot | Real-time SSH Honeypot — Cowrie + Wazuh SIEM + Wireshark DPI — Automated botnet confirmed | Cowrie, Wazuh, Wireshark, Kali |
| android-malware-analysis | Android Malware Detection — Static analysis + Random Forest ML — 100% malware recall | androguard, scikit-learn, Python, Kali |
| wazuh-nmap-detection | Real-time Nmap port scan detection — TCP, UDP, ICMP — Level 15 critical alerts | Wazuh SIEM, iptables, Kali |
| wazuh-homelab | Wazuh Manager & Agent homelab setup | Wazuh |
Independent vulnerability research under responsible disclosure programs. All findings reported via authorized VDP/bug bounty platforms. No production data accessed or modified.
Duplicate findings confirm the vulnerability was real and independently discovered using the same passive methodology.
| Finding | Class | Severity | Platform | Result |
|---|---|---|---|---|
| Security vulnerabilities identified across live production assets — RBAC failures, AI over-privilege, security misconfigurations — mapped to OWASP Top 10:2025 | CWE-862, CWE-1336, CWE-693 | 🟡 Medium / Low | NCSA Bug Bounty VDP | Awarded Certificate of Appreciation |
CMS API token exposed in Nuxt.js SSR client-side state (window.__NUXT__) — read/write access to production dataset |
CWE-798 — Hard-coded Credentials | 🔴 High | HackerOne VDP | Duplicate — Pre-validated |
- 🏆 Certificate of Appreciation — NCSA Bug Bounty Program (VDP) · May 2026 ·
- 🎯 CICSA — Certified IT Infrastructure & Cyber SOC Analyst · RedTeam Hacker Academy.
- 🎯 TryHackMe — Active
- 🎯 LetsDefend — Active
- 🎯 Bugcrowd — Active
- 🎯 HackerOne VDP — Active
SAIZERO — Ground Zero Defence CyberLycan — Every shadow has a hunter