| 📊 Performance Metrics | 📈 Current Streak |
|---|---|
Computer Science researcher specializing in Red Teaming, Offensive Security Architecture, and Low-Level Exploit Development.
I build offensive security tools from the ground up, dissect and recreate adversarial attack vectors, and construct robust, ToS-compliant software integrations.
- 🎯 Primary Focus: Active Directory internals, Kerberos manipulation, C2 telemetry, binary reversing, and evasive client-side mods.
- 🔬 Current Research: Distributed multi-platform architectures, AV/EDR evasion mechanics, and real-time audio/network stream engineering.
┌──[ Red Team & Adversarial Operations ]
│ ├── Active Directory: Kerberoasting, AS-REP Roasting, Shadow Credentials, gMSA Key Extraction
│ ├── Infrastructure: C2 Framework Design, Domain Dominance, Pivoting & Lateral Movement
│ └── Network Attacks: DNS Tunneling, Rogue AP Infrastructure, MITM Telemetry Manipulation
│
└──[ Engineering & Systems Architecture ]
├── Languages: Rust, Go, Python, TypeScript, C, x86/x64 Assembly, Modern Bash
├── Mod Engineering: Electron App Patching, Web Audio DSP, Dynamic Buffer Normalization
└── Security Automation: ML-powered CVE Triaging, Custom Protocol Dissectors, Automated Threat Auditing
| Project | Domain | Architecture & Highlights |
|---|---|---|
| discord-voice-notes | Client Modding & Audio DSP | Native Opus 64kbps recording engine, Base64 waveform generation, 83 Full HD glass themes, real-time theme search, and large file bypass |
| BEN_C2 | Command & Control | Asynchronous post-exploitation C2 server engineered with Rust performance core and Python API orchestration |
| CVE-2026-31431-Exploit | Exploit Development | Vulnerability research, memory analysis, and weaponized proof-of-concept exploitation suite |
| CVE-2024-37054 | Vulnerability Research | Technical analysis, payload structuring, and environment reproductive attack demonstration |
| gmsa-aes-key-extractor | Active Directory Security | Group Managed Service Account (gMSA) cryptographic AES key extraction and offline ticket forged decryption |
| CVE-FINDER | Threat Intelligence & ML | Automated CVE ingestion pipeline evaluating real-time zero-day chatter and CVSS severity scoring |
| uploadserver2 | Network Systems | Secure, self-hosted HTTP/2 file transport server featuring authenticated streaming and remote shell sync |
| esp32_NAT_router | Embedded & Hardware Security | ESP32-based portable micro-router firmware facilitating covert field deployment and packet redirection |
Active participant on Hack The Box and practical cyber training labs:
Web Security • Active Directory Exploitation • Pivoting & Tunnels • Post-Exploitation • Privilege Escalation • SOC Triage
- B.S. in Computer Science University of Agriculture, Faisalabad (2023 – 2027)
