Offensive & Defensive Security Lab

Cybersecurity Lab

My threat intelligence and penetration testing terminal. Displays my practical exploits, tool proficiencies, and technical walkthroughs.

Threat map · simulated · drag to spin

TryHackMe Telemetry

Verified CTF & Lab Standing

Verified

Hack The Box Lab

Offensive Machine Audits

Machines Pwned:5 Active
Focus Vectors:AD / SQLi / JWT
Platform Rank:Script Kiddie ↑

Lab Infrastructure

Virtual Sandbox Environment

Hypervisor:VirtualBox / WSL2
Target Range:Metasploitable / OWASP
Isolation:Host-Only Subnet

CTF Competitions

CompetitionCategoryAchievementApplied Skills
RRU Internal CTFJeopardy (Web/Crypto)Rank: 4th
SQL InjectionReverse EngineeringWireshark
Inter-College Hacking TrialsAttack & DefenseRank: 12th
Port ScanningPrivilege EscalationMetasploit
Techfest Bombay CTF QualifierJeopardyRank: Top 50
OSINTRSA CryptographyWeb Exploitation

Tool Proficiency

Kali Linux

Advanced
Operating System

Primary testing environment for penetration testing, automated scripts, and custom payloads.

Nmap

Expert
Reconnaissance

Used for network scanning, host discovery, OS fingerprinting, and script audits.

Burp Suite

Advanced
Web Exploitation

Intercepting HTTP requests, token tampering, fuzzing params, and mapping endpoint structures.

Wireshark

Intermediate
Packet Analysis

Sniffing local interfaces, decrypting traffic, analyzing TCP streams, and forensic audits.

Metasploit

Intermediate
Exploitation Framework

Deploying standard exploit modules, payload listeners, and proof-of-concept setups.

Lab Writeups & Walkthroughs

Comprehensive vulnerability breakdowns & remediation guides

2 Published
TryHackMe - Hard

JWT Authentication & Insecure Signature Verification

A technical walkthrough of auditing JSON Web Token (JWT) algorithms, exploiting 'None' algorithm misconfigurations, and mitigating weak secret keys.

TryHackMe - Medium

SQL Injection (SQLi) Vulnerability Writeup

A complete walkthrough of extracting database tables from an insecure SQL portal using UNION-based query injections.