I'm Aruvasaga Chithan A — an Offensive Security Researcher, eJPT-certified penetration tester, and Top 1% TryHackMe learner. I break things ethically, find vulnerabilities, and responsibly disclose them to make software more secure.
$ cat mission.txt
> Mastering Windows Internals to transition from Pentester → Red Teamer
> Researching and responsibly disclosing real-world vulnerabilities
> Publishing root-cause analyses & Active Directory attack writeups
> Building offensive security tools from scratch to understand attacks deeply📡 Live feed from Medium — new entries appended as they're published
- How I Found a High-Severity Directory Traversal in Flask-Admin
- How I Found an Auth Flaw in a Government Site: From GraphQL Introspection to Unauthorized Access
- How I Abused a Group Policy Object (GPO) in Active Directory (And How to Fix It)
- How I Escalated to Domain Admin Using AD CS (And How to Fix It)
- How I Reset Another User’s Password Without Domain Admin (And How to Fix It)
[✓] HOF-KNAW
[✓] CERT-In (2)
[✓] NASA VDP (4)
[✓] Microsoft Security Response Center (1)
[✓] Open Source Security Report (Accepted)
