B.Sc Graduate in Advanced Networking and Cyber Security with hands-on experience in Cybersecurity, VAPT, Web and API Security, and AWS. Skilled in identifying and reporting real-world vulnerabilities through Bug Bounty programs and VDPs, with a track record of helping secure multiple companies. Seeking a role to enhance organizational security through advanced assessment and defense strategies.
I am a passionate Cybersecurity practitioner with a strong focus on Vulnerability Assessment and Penetration Testing. My expertise extends to Web Application and API Pentesting, Lab Design, and AWS security.
Currently pursuing my BTech in Computer Science Engineering, I am constantly expanding my knowledge and skills in the rapidly evolving field of information security.
An all-in-one tool to detect phishing emails by automatically analyzing email headers, embedded URLs, and attachments.
CVE-2024–24919 is a critical vulnerability identified in Check Point’s CloudGuard Network Security appliance. Basically it is a LFI (Path Traversal) Vulnerability. This tool helps to identify this Velnerability and Exploit the Security Flaw. It is written in Bash-Scripting. Made it for Automating the Vulnerability.
A Python-based CLI tool for Pentesters and CTF players to quickly generate reverse shell commands in multiple languages for various use cases.
Subjects: Physics, Chemistry, Math, Biology, Bengali, English
Percentage: 90.5%
Percentage: 91%
Ardent Computech Pvt. Ltd
Udemy
APISec University
TryHackMe
TryHackMe
TryHackMe
TryHackMe
TryHackMe
Companies: Jio, Sony, NASA, GEA Group, BBC, Honda, Estonia Government, Sprinklr, HackerRank, Independer.
Received official acknowledgment letters from NASA, Drexel University and DoED for responsibly disclosing security vulnerabilities through their Vulnerability Disclosure Programs (VDPs).
Published multiple cybersecurity and scripting-related articles on Medium, featured in renowned publications like OSINT Team.
Achieved Pro Hacker rank on Hack The Box, with multiple CTFs and Fortress machines solved, showcasing advanced skills in penetration testing, real-world exploitation, and complex challenge environments.
Ranked in the Global Top 1% on TryHackMe, showcasing expertise in cybersecurity, ethical hacking, and VAPT through solving advanced, real-world challenges
This vulnerability lets attackers bypass middleware-based authorization by injecting the x-middleware-subrequest header, allowing them to skip authentication checks and access restricted areas of the application.
Read on Medium
A hands-on walkthrough of cloud penetration testing scenarios based on TryHackMe’s Hackfinity Battle Encore CTF. Learn how to uncover misconfigurations and exploit vulnerabilities in real AWS environments.
Read on Medium
Discovered multiple SQL Injection vulnerabilities in a single VDP program using targeted Google Dorks. This write-up showcases how search engine reconnaissance can uncover vulnerable endpoints and lead to impactful findings.
Read on Medium
