- π Year 3 Cyber Security Student @ HUST (GPA: 3.33/4.0)
- π― Focus: Web Application Security, Penetration Testing
- π§ Mindset: Attacker Thinking, Systematic Problem Solver
- π Goal: Product Security Engineer (AI-Augmented)
- πͺ Motto: No Pain, No Gain
| Target | Vulnerability | Severity | Write-up |
|---|---|---|---|
| GenSpark.ai | Wormable Stored XSS via Unsanitized AI Output | π΄ Critical | Read |
| Cα»c Cα»c Browser | DOM-based XSS in Dictionary & Translate Extension | π Medium | Read |
More coming soon...
| Project | Description |
|---|---|
| security-writeups | Real-world vulnerability write-ups and security research |
| AI-Based-Security-Enhancements | Real-time intrusion detection system on Linux using ML |
| vpn-detector-traffic-analysis | Detect VPN vs. non-VPN traffic using ML (RF / XGB / CNN + Stacking) |
| OSINT-Tool-ALL-IN-ONE | OSINT tool for Facebook profile and comment collection |
AI-powered reconnaissance tool: Human directs β AI integrates β Action executes
| π NOW | π― NEXT | π FUTURE |
|---|---|---|
| PortSwigger Academy | HTB CPTS | Product Security Engineer |
| Bug Bounty Hunting | IELTS 5.5+ | Remote for US/EU Company |
| Security Write-ups | Internship (Summer 2026) | Security Architect |
