VAPT & WAPT, SOC, malware & reverse engineering, AI-agent security tools and IoT research — what I've built and delivered. Filter by area and click any card for the full story.
AI Attack & Pentest Agent An in-house agent that chains recon, port and subdomain discovery, scanning and exploit validation — with the LLM planning next steps and filtering false positives.
Nmap, Nuclei, Burp Suite, SQLMap, ffuf Drafts VAPT reports with CVSS + PoC evidence Human approval before every exploitation step Full details LLM Security Scanner Tests chatbots, RAG apps and AI agents against the OWASP Top 10 for LLM Applications with no manual prompting, and scans MCP servers for tool poisoning.
Garak, PyRIT, Promptfoo + custom payloads Mapped to OWASP LLM Top 10 & MITRE ATLAS Runs in CI/CD on every model or prompt change Full details AI-Assisted Intercepting Proxy A Burp-style proxy that captures browser, mobile and API traffic, replays mutated requests and uses an LLM to flag likely bugs for manual review.
Injection, IDOR, broken access control Sensitive data exposure, missing headers Confirmed findings export to the VAPT report Full details CRIS InfoTech VAPT Practice The testing methodology, tooling and quality gates behind every CRIS InfoTech engagement — built from scratch as CTO.
OWASP WSTG, MASTG, API Top 10 & PTES aligned 4-member tester bench, peer-reviewed findings 100+ VAPT, SAST & code review projects Full details VAPT Report Templates Executive summary + technical deep-dive templates with CVSS scoring, PoC evidence and developer-ready fixes.
CVSS vector for every finding PoC screenshots & reproduction steps Quality-reviewed before delivery Full details Web, API & Mobile Pentest Programme Five years of full-scope testing at BERRY9 and CRIS — web apps, REST/GraphQL APIs, Android & iOS — 300+ validated vulnerabilities.
RCE, SSRF, SQLi, IDOR, auth bypass JWT, OAuth, BOLA & mass assignment Pinning bypass, insecure storage, weak crypto Full details SIEM Detection Use-Case Library Detections for brute force, privilege escalation, lateral movement and exfiltration — mapped to MITRE ATT&CK and tuned to cut noise.
SPL, KQL & Sigma rules Windows, Sysmon, firewall, DNS, cloud audit logs False positives tuned down Full details SOAR Playbook Automation Automated phishing triage, IOC enrichment and host isolation using SOAR workflows and Python.
Phishing triage in minutes Auto IOC enrichment (VirusTotal, MISP) One-click host isolation Full details Malware Analysis & YARA Pipeline The workflow behind 6000+ analysed samples — ransomware, RATs, droppers and info-stealers — turning reversing into detections.
Static, dynamic & reverse engineering Family-level YARA rules IOCs pushed to MISP for the SOC Full details RAT & Info-Stealer Reverse Engineering Deep reversing of remote-access trojans and credential stealers — persistence, C2 protocols and data theft routines.
Unpacking & deobfuscation C2 config extraction Persistence & theft routines mapped Full details Dark Web & Leak Monitoring Monitoring leak sites, forums and Telegram channels for leaked credentials, exposed data and chatter about client organisations.
Credential & data leak alerts Threat actor chatter tracking Feeds threat intel reports Full details IoT Shield IoT malware detection and threat intelligence system monitoring ARM and MIPS devices in real time for reverse shells, botnets and C2 traffic.
OpenEDR, YARA, Suricata, Radare2, Binwalk Automated IOC sharing through MISP Attacks simulated with Kali NetHunter Full details Raspberry Pi & IoT Hardware Lab Hands-on exploration of IoT hardware — CPU, memory, storage, GPIO, boot process and firmware — to understand how devices fail.
Firmware extraction & modification Boot process and GPIO analysis Device behaviour and weakness mapping Full details WannaCry Malware Analysis Full static and dynamic analysis of WannaCry ransomware — behaviour, encryption, propagation and kill-chain stages — in FLARE VM and REMnux.
IOCs and persistence mechanisms Detection and mitigation guidance Part of 6000+ samples analysed Full details Assessment
Organisational Network Assessment Vulnerability assessment of a college network — misconfigurations, outdated services and security gaps, then hardening.
Misconfigurations and outdated services Hardening implemented Improved network resilience Full details