whoami

Jatin Singh

> Cybersecurity Researcher_

Breaking systems to make them stronger. Specializing in binary exploitation, active directory attacks, and web application security.

View ProjectsContact Me

// about

Root Access

jatin@kali:~

> Cybersecurity enthusiast with a passion for understanding how things work under the hood.

> Experienced in penetration testing, vulnerability research, and exploit development.

> Active CTF player and bug bounty hunter.

> Always learning, always breaking, always improving.

$ echo $STATUS

Available for opportunities

10+

Projects

5+

Certifications

50+

Writeups

1K+

CTF Points

// skills

Technical Arsenal

0x

Binary Exploitation

Buffer Overflows5/5
ROP Chains4/5
Heap Exploitation3/5
Format String4/5
Shellcode Writing4/5
GDBpwndbgpwntoolsROPgadget
W/

Web Security

XSS5/5
SQL Injection5/5
SSRF4/5
XXE3/5
Auth Bypass4/5
Burp SuiteNucleiSQLMapXSStrike
AD

Active Directory

Kerberoasting5/5
AS-REP Roasting4/5
Pass-the-Hash5/5
DCSync4/5
GPO Abuse3/5
BloodHoundImpacketRubeusMimikatz
F+

Forensics & RE

Malware Analysis4/5
Memory Forensics3/5
Reverse Engineering4/5
Network Forensics3/5
Disk Forensics3/5
GhidraVolatilityWiresharkStrings

// projects

Featured Work

FEATURED
web

VulnChain

Automated vulnerability scanner with chain detection for complex attack paths in enterprise networks.

PythonAPINmapNuclei
View on GitHub
FEATURED
active directory

ADExploit

Active Directory attack framework for red team operations with automated privilege escalation.

C#ImpacketBloodHound
View on GitHub
binary exploitation

HeapLab

Custom heap exploitation training environment with vulnerable binaries and exploit generation.

CGDBpwntools
View on GitHub
web

PhishGuard

ML-powered phishing detection system analyzing URLs, email headers, and page content in real-time.

PythonTensorFlowFlask
View on GitHub
network

PacketSnitch

Network forensics tool for deep packet inspection and anomaly detection with automated alerting.

RustlibpcapZeek
View on GitHub
FEATURED
malware

MalwareSandbox

Automated malware analysis sandbox with behavioral monitoring and IOC extraction.

PythonDockerYARA
View on GitHub

// binary exploitation

Pwn & Exploit

01. Buffer Overflow

Stack-based buffer overflows, SEH overflows, and canary bypass techniques.

StackSEHCanary BypassShellcode

02. ROP Chains

Return-Oriented Programming for bypassing NX/DEP protections and achieving code execution.

ROPJOPret2libcROPgadget

03. Heap Exploitation

Use-after-free, heap overflow, double-free, and house-of techniques.

UAFHeap OverflowTcacheHouse of
exploit.py

from pwn import *


# Connect to target

p = remote("challenge.ctf.com", 1337)


# Build payload

payload = b"A" * 72

payload += p64(0x4011b0)

payload += p64(0x7ffd1234)


# Exploit

p.sendlineafter(b"> ", payload)

p.interactive()

// active directory

Domain takeover

01
01

Reconnaissance

  • BloodHound Enumeration
  • LDAP Recon
  • SPN Discovery
  • Group Policy Mapping
BloodHoundldapsearchPowerView
02
02

Initial Access

  • AS-REP Roasting
  • Kerberoasting
  • Password Spraying
  • NTLM Relay
RubeusImpacketCrackMapExec
03
03

Privilege Escalation

  • Token Impersonation
  • Unconstrained Delegation
  • DCSync
  • GPO Abuse
MimikatzImpacketCertify
04
04

Lateral Movement

  • Pass-the-Hash
  • Pass-the-Ticket
  • Overpass-the-Hash
  • WMI Execution
CrackMapExecEvil-WinRMPsExec

// tools

Toolbox

Reconnaissance

Nmap5/5
Masscan4/5
Amass3/5
nmapmasscanamasssubfinder

Exploitation

Metasploit5/5
Cobalt Strike3/5
Sliver4/5
msfcobaltsliverhavoc

Web Testing

Burp Suite5/5
OWASP ZAP4/5
Nuclei5/5
burpzapnucleisqlmap

Forensics

Wireshark5/5
Volatility3/5
Autopsy3/5
wiresharkvolatilityautopsy

Password Attacks

Hashcat5/5
John4/5
Hydra4/5
hashcatjohnhydra

Binary / Pwn

GDB/pwndbg5/5
pwntools5/5
ROPgadget4/5
gdbpwndbgpwntools

// writeups

Security Journal

ctfmedium

HackTheBox - UnderWriteUp

OSCP-style machine with web enumeration and privilege escalation via kernel exploit.

HTBLinuxPrivEsc
2024-08-15Read more →
vulnerabilityhard

CVE-2024-3094: XZ Utils Backdoor

Deep dive into the XZ Utils supply chain attack and its implications for Linux security.

CVESupply ChainLinux
2024-04-01Read more →
techniquemedium

Kerberoasting from Scratch

Complete guide to Kerberoasting attacks in Active Directory environments.

ADKerberosCrackMapExec
2024-03-20Read more →
techniqueeasy

Buffer Overflow Lab Walkthrough

Step-by-step stack buffer overflow exploitation from discovery to shell.

BinaryPwnGDB
2024-02-10Read more →
labeasy

TryHackMe - AD Basics

Foundational AD concepts and common attack paths for beginners.

THMADBeginner
2024-01-15Read more →
toolhard

Burp Suite Advanced

Mastering Burp Suite for complex web application penetration testing.

BurpWebProxy
2024-07-22Read more →

// certifications

Verified Credentials

eJP

eJPT

INE Security

2024

Sec

Security+

CompTIA

2024

CRT

CRTP

Pentester Academy

2024

BTL

BTL1

Security Blue Team

2023

CTF

CTF Champ

Local CTF

2024

AWS

AWS Cloud

AWS

2023

// linux

Tux Mastery

System Administration

Linux server management, hardening, and automation.

BashsystemdiptablesSELinux

Security Tools

Proficient in Linux-based security tooling.

KaliParrotArchNix

Networking

TCP/IP stack, socket programming, and packet analysis.

tcpdumpnetstatssnftables
linux-commands.sh

$ cat /etc/os-release

Kali GNU/Linux Rolling

$ neofetch --off

OS: Kali Linux x86_64

$ which nmap burpsuite gdb

/usr/bin/nmap

/usr/bin/burpsuite

/usr/bin/gdb

$ _

// windows

Windows Offense

AD Attack Surface

Deep understanding of Active Directory attack vectors.

KerberosNTLMGPOACLs

Post-Exploitation

Windows privilege escalation and persistence techniques.

MimikatzRubeusSharpHoundCertify

Defense Evasion

Bypassing Windows security controls and EDR solutions.

AMSIETWAppLockerWDAC
powershell.exe

PS C:\> Import-Module ActiveDirectory

PS C:\> Get-ADDomain

DomainSID : S-1-5-21-...

DomainMode : Windows2016Domain

PS C:\> Get-DomainUser -SPN

samaccountname : svc_sql

SPN : MSSQLSvc/sql01

PS C:\> _

// contact

Get In Touch

$ echo "Let's connect"

GH

GitHub

@0xCyb3rgh0st

EM

Email

jatin@jatinsingh.com.np

LI

LinkedIn

Connect with me

message.sh

$ cat /etc/motd

"The best way to predict the future is to invent it."

- Alan Kay

$ echo "Status: Open for opportunities"

Status: Open for opportunities

$ echo "Response time: < 24h"

Response time: < 24h

$ _