I identified and reported a valid vulnerability in NASA’s public web infrastructure through its Vulnerability Disclosure Program. NASA accepted my report and awarded me a Letter of Recognition, listing me in its Hall of Fame.
In independent vulnerability research, I found an OS command injection in an unmaintained npm package by tracing user-controlled input to an unsanitised shell call. I reported it to MITRE under coordinated disclosure, with a CVE ID pending.
For the HTB CPTS practical exam, I performed a black-box penetration test of an enterprise Active Directory network. I chained vulnerabilities across web applications and Windows and Linux hosts, then documented findings, CVSS ratings, reproduction steps, and remediation advice in a commercial-grade report.
I’m a Computer Science undergraduate with the HTB Certified Penetration Testing Specialist certification, and I’m completing the Certified Red Team Operator course. In controlled labs, I’ve also developed Python network scanning and ARP spoofing utilities, along with proof-of-concept security tooling.
