Portfolio

msf6 > use assessments/bank-core-vapt CRITICAL

VAPT · Banking

Core Banking API Security Assessment

Identified 3 critical vulnerabilities including SQL injection in transaction APIs, broken authentication in admin portal, and unencrypted PII storage. Provided remediation roadmap adopted by the bank's security team.

Burp Suite SQLMap OWASP Top 10

Remediated

Banking · 2023

msf6 > use operations/mnc-red-team HIGH

REDTEAM · Corporate

Full-Scope Red Team Operation - MNC HQ

12-week adversarial simulation covering phishing, physical intrusion, Active Directory attacks, and lateral movement. Successfully demonstrated real attacker pathways through the organization.

Metasploit Cobalt Strike BloodHound

Complete

Corporate · 2023

msf6 > use recon/fraud-investigation INTEL

OSINT · Law Enforcement

Online Investment Fraud Attribution

Traced a ₹2.4 Cr online investment scam network across 5 states using OSINT - social profiles, crypto wallet tracing, phone number OSINT, and fake website infrastructure mapping. Evidence submitted to cybercrime cells.

Maltego Shodan OSINT Framework

Case Closed

Law Enforcement · 2022

msf6 > use forensics/ransomware-ir CRITICAL

FORENSICS · Healthcare

Ransomware Incident Response & Recovery

Led incident response for a healthcare provider hit by Ryuk ransomware. Performed memory forensics, identified patient zero, recovered 90% of encrypted data. Zero patient data leaked.

Volatility Autopsy DFIR

Recovered

Healthcare · 2022

msf6 > use bounty/e-commerce-rce CRITICAL

BUGBOUNTY · E-commerce

Remote Code Execution in Major E-Commerce Platform

Discovered critical RCE via deserialization flaw in a major Indian e-commerce platform. Responsibly disclosed. Recognized in Hall of Fame and awarded ₹1.5 Lakh bounty.

Java Deserialization Ysoserial Burp Suite

Hall of Fame

E-commerce · 2021

msf6 > use legal/it-act-advisory LEGAL

LAW · Fintech

IT Act Compliance & Data Breach Response

Advised a fintech startup on IT Act 2000 compliance following a data breach affecting 80,000+ users. Coordinated with CERT-In, prepared breach notification, and helped avoid regulatory penalties.

IT Act 2000 CERT-In GDPR

Resolved

Fintech · 2022

↑ Sample data shown. Go to WP Admin → Portfolio → Add New to add your real projects.

Work Together

Need a Security Assessment for Your Organization?

If your organization needs penetration testing, a red team engagement, OSINT investigation, or cybercrime legal consultation - I'm here to help.

Start a Consultation → Read Security Blog

Security Engagements & Case Studies

Need a Security Assessment for Your Organization?