Rigorous Industry certifications demonstrating offensive competence
Altered Security
Hands-on Active Directory attacks including BloodHound vectors, Kerberoasting, lateral movement, and DC takeover.
Credential ID: 0d6a3790
Zero-Point Security
Adversarial operations using Cobalt Strike, defense evasion, and host security boundary exploitation.
CURRENT ENGAGEMENT
CyberWarFare Labs
Attack campaigns targeting hybrid enterprise boundaries, focusing on domain enumeration and privilege abuse.
ID: 68c8dd1a40a4bd67bdcba0c7
INE
Core offensive security practices spanning host configuration scanning, local exploits, and basic web auditing pivots.
Credential ID: fe373fe2
The SecOps Group
Advanced network penetration testing covering infrastructure exploitation, service enumeration, post-exploitation tactics, and comprehensive reporting. Passed with Merit.
Credential ID: 11610094
The SecOps Group
Focusing on modern defensive topology analysis, transport safeguards, and configuration auditing frameworks.
Credential verified
The SecOps Group
Identified human compromise vectors, advanced phishing models, trace metrics, and structured organizational hardening.
Credential ID: 11260182
Hack & Fix
OWASP Web top 10 payload injection, parameter pollution, and basic authorization checks.
Credential ID: 2091-5349-7151-6117
TCM Security
Security challenges and adversarial testing protocols targeting large language artificial intelligence engines.
Credential ID: cert_277wdj5j
TCM Security
Focus on systems engineering, enterprise network communications, and administrative baseline security guides.
Credential ID: cert_bcqgb21v
Acknowledge contribution lists and institutional Synack recognitions
Synack VDP · June 2026
Identified and reported vulnerabilities within judicial domains; patched and acknowledged in the official list of contributors.
Synack VDP · June 2026
Secured Federal Education nodes by identifying logical vulnerabilities via Synack coordination.
May 2026
Disclosed a vulnerability on auth.slapfive.com; assigned official tracker token SL-10462.
Synack VDP · May 2026
Identified security misconfigurations within Federal public health portals; credited officially.
April 2026
Disclosed critical domain broken link hijacks tracked officially under token index: VDP-2026-1027.
Synack VDP · 2026
Disclosed critical vulnerabilities affecting the federal justice department portals, acknowledged officially by the VDP program.
Responsible Disclosure · 2026
Acknowledged for discovering and reporting a critical security vulnerability within Morgan Stanley's infrastructure, ensuring proactive mitigation.
April 2025
Awarded 1st place in the CTF championship assessing various exploitation pathways and domain penetration steps.
Advocating cyber awareness and teaching defensive red teaming models
April 2026 · Khulna University of Engineering & Technology
May 3, 2026 · Career Roadmap Guidelines
February 15, 2026 · Fundamental Presentation
Conducted broad session introducing web security vectors, privilege loops, secure programming patterns, and active tryhackme models.
Deep walks detailing offensive assessments, Linux vulnerabilities, and Active Directory tests
Enumeration, automated scans, exploiting misconfigurations, and root escalations on Linux challenge frameworks.
Getting past the static noise to build practical hands-on laboratories, CTF strategies, and solid peer mentoring paths.
Inside access loophole vectors where plain header variables can manipulate authorization filters.
Timeline tracking, prep courses completed, key command structures, and domain strategy of our Altered Security test.
Analyzing AMSI bypass routines, script block metrics, logging capabilities, and Constrained Language boundaries.
MSSQL configuration loop analysis, xp_cmdshell triggers, credential theft, and total domain administrator elevation.
FTP server enumeration, anonymous uploads, setting reverse shell vectors, and standard Linux local escalations.
