Analyzing Attack Vectors,
Securing Infrastructure & Code.
B.Tech Computer Science (Cybersecurity Specialization) at Amrita Vishwa Vidyapeetham ('27). Passionate about Application Security, Vulnerability Management, and Defensive Automation. Dedicated to analyzing attack surfaces, hardening system architectures, and protecting enterprise applications against evolving threats.
Interactive Terminal CLI
Featured Security Tooling
APIShield
Enterprise-grade API security learning platform built with FastAPI, PostgreSQL, SQLAlchemy, and Clean Architecture. Designed to teach REST API design, authentication, RBAC, defensive cryptography, and OWASP API Security.
SAST FP Reducer
Multi-model AI consensus engine (OpenRouter + Groq) that classifies Semgrep SAST findings as TRUE_POSITIVE, FALSE_POSITIVE, or NEEDS_REVIEW — drastically reducing noise so engineers fix real vulnerabilities.
Interview Sentinel
Real-time interview environment verification platform featuring desktop attestation, live security monitoring, process isolation checks, and an interviewer monitoring dashboard.
AuthScope
Custom Burp Suite extension for detecting Broken Access Control (BAC) vulnerabilities through HTTP request mutation, automated replay analysis, and comparative response evaluation.
AppSec CI Pipeline
Deliberately vulnerable Django application integrated with SAST (Semgrep), SCA (Trivy), and DAST (OWASP ZAP) in GitHub Actions CI, with automated issue creation from security findings.
BookMyShow Watcher
Automated ticket availability monitoring tool built with Playwright headless browser, Telegram Bot API, and automated background polling for high-demand event tickets.
Log Anomaly Detector
Purple team log analysis and anomaly detection tool that parses authentication logs (`auth.log`) to identify brute-force attempts and credential stuffing patterns.
Network IPS
Real-time Network Intrusion Prevention System prototype using Scapy, NetfilterQueue, and `iptables` for live packet inspection, signature matching, and automated threat mitigation.
AppSec Knowledge Base
Knowledge vs Possession vs Inherence
Authentication factors consist of Knowledge (passwords, PINs), Possession (tokens, mobile authenticator apps), and Inherence (biometrics, behavioral heuristics).
Username Enumeration Mitigation
Prevent differential response timing and unified error messages (e.g., "Invalid username or password") to eliminate username enumeration attack surfaces.
Interleaving Brute-Force Bypass
Bypassing basic IP-lockout counters by interleaving successful authenticated attempts (`wiener:peter`) between target brute-force payload requests.
OAuth 2.0 & OIDC Flow Attacks
Flaws in redirect URI validation, authorization code interception, state parameter omission leading to account takeover via CSRF in login callback.
JWT Secret & Algorithm Confusion
Exploiting `alg: none` or confusing asymmetric RS256 keys with symmetric HS256 HMAC verification signatures to forge arbitrary JWT claims.
DOM XSS Sources & Sinks
Data flowing from untrusted sources (`location.search`, `location.hash`, `document.referrer`) into dangerous sinks (`document.write`, `eval()`, `element.innerHTML`).
WAF Tag Bypass Tactics
Utilizing allowed HTML5 event attributes like `<body onresize=print()>` inside auto-resizing `<iframe>` or custom tags when script tags are filtered.
SVG Attribute Animation
Exploiting `<svg><a><animate attributeName="href" values="javascript:alert(1)"/>` to dynamically construct `javascript:` execution links post WAF parsing.
CSP (Content Security Policy) Bypasses
Bypassing weak CSPs configured with `'unsafe-inline'`, nonce leakage via DOM injection, or JSONP endpoint gadget chains allowed in trusted origins.
Context-Aware Output Encoding
Preventing stored and reflected XSS by enforcing strict HTML Entity, JavaScript String, HTML Attribute, and URL Component encoding per context.
CSRF Prerequisites
Requires a state-changing action, reliance on implicit browser session cookies, and predictable request parameters without cryptographic anti-CSRF tokens.
SameSite Cookie Protection
Enforcing `SameSite=Strict` or `SameSite=Lax` cookie flags to restrict cross-site request cookie transmission on third-party navigations.
Double Submit Cookie Pattern
Storing a random token in both a cookie and request header/body, verifying equality server-side without server session state overhead.
CORS Misconfigurations
Exploiting `Access-Control-Allow-Origin: *` combined with `Access-Control-Allow-Credentials: true` or null origin reflect to leak sensitive API responses.
Subdomain Enumeration Pipeline
Combining passive OSINT tools (`subfinder`, `assetfinder`, `amass`), deduplicating lists, and probing live hosts via `httpx` for HTTP titles and tech stacks.
5-Step Discovery Framework
1. Find Injection Point -> 2. Test Single Quote -> 3. Observe Syntax Error -> 4. Verify Payload Execution -> 5. Demonstrate Security Impact.
Content Discovery & Parameter Fuzzing
Fuzzing hidden endpoints and parameters using `ffuf` or `gobuster` with custom wordlists to uncover unlinked administrative functions.
JS Bundle Recon & Endpoint Extraction
Parsing compiled client-side JavaScript bundles to extract API routes, hidden environment flags, developer comments, and hardcoded tokens.
End-to-End Request Chain
`Browser -> DNS -> CDN / Edge WAF -> Load Balancer -> Reverse Proxy (Nginx) -> Web Server -> Application Code -> Database`.
Origin IP Exposure & CDN Bypass
Leaked origin server IPs allow attackers to bypass CDN WAF shields. Mitigated by origin firewall rules restricting inbound traffic strictly to CDN IP blocks.
TLS/SSL Hardening & Forward Secrecy
Enforcing TLS 1.3, HSTS headers (`max-age=31536000; includeSubDomains; preload`), and Perfect Forward Secrecy (PFS) cipher suites.
Packet Filtering & Rate Limiting
Using Scapy, NetfilterQueue, and `iptables` to inspect raw IP headers, rate-limit SYN floods, and block malicious traffic signatures.
Technical Skill Matrix
Certifications & Honors
ASCP
Advanced API threat modelling, REST security architecture, BOLA/IDOR auditing, and OAuth2 security.
CASA
Enterprise API security design, microservice gateway defense, JWT security, and zero-trust API architecture.
PJPT
Practical internal network pentesting, Active Directory exploitation, and privilege escalation.
ISC2 CC
Foundational cybersecurity principles, access controls, network defense, and incident response.
Splunk Core Certified
SIEM event logging, SPL search processing language, security dashboards, and incident detection.
Team Hunter
National competitive CTFs with specialized focus on Web Exploitation, API security, and Cryptography.