whoami

Jatin Singh

> Security Researcher & Exploit Developer_

Building world-class open-source tools that make vulnerability research easier. Automation over repetition. Research over noise.

View ProjectsContact Me

// about

Root Access

jatin@research:~

> Security Researcher focused on building open-source tooling.

> Exploit development, reverse engineering, and AD security.

> Building tools that eliminate repetitive tasks.

> BSc (Hons) Ethical Hacking & Cyber Security.

$ echo $MISSION

Build world-class open-source tools for VR.

5

Certifications

6

Open Source Tools

BSc

Ethical Hacking

VR

Focus Area

// Research Interests

💥

Exploit Development

Linux & Windows

🔍

Reverse Engineering

Binary Analysis & Automation

🏢

Active Directory

Offensive Security

🌐

Web Security

Modern Web Exploitation

🤖

AI Security

AI-assisted Vulnerability Research

☁️

Cloud Security

Attack Surface Research

// skills

Technical Arsenal

PWN

Exploit Development

Stack Exploitation5/5
ROP Chains5/5
Heap Exploitation4/5
Format String5/5
Shellcode Writing4/5
pwntoolspwndbgROPgadgetGDBFrida
RE

Reverse Engineering

Ghidra5/5
IDA Pro4/5
Frida5/5
Binary Analysis5/5
Automation4/5
GhidraIDAFridaWinDbgpwndbg
OPS

Offensive Security

AD Attacks5/5
Web Exploitation5/5
Privilege Escalation5/5
Lateral Movement4/5
C2 Frameworks4/5
Burp SuiteImpacketBloodHoundCertipySliverNuclei
DEV

Languages & Infra

Python5/5
Go4/5
Rust3/5
C4/5
JavaScript4/5
PythonGoRustCDockerLinux

// projects

Flagship Projects

FEATURED
binary exploitation

pwnlibc

Advanced libc identification toolkit for exploit development. Fast libc identification, automatic download, symbol lookup, Python API, and CLI.

PythonExploit DevCLI
View on GitHub
FEATURED
binary exploitation

HexSnare

Hexadecimal analysis and parsing toolkit for binary analysis, CTF challenges, and exploit development.

PythonBinaryHex
View on GitHub
FEATURED
web

csrf-proc

CSRF vulnerability detection and exploitation framework for web application security testing.

PythonWebCSRF
View on GitHub
reverse engineering

ghidra-open

One-command launcher for Ghidra. Binary → Automatic Project → Headless Analysis → Launch GUI.

GhidraAutomationJava
View on GitHub
vulnerability research

VulnOS

An open-source workspace for vulnerability research. Workspace management, findings tracking, AI assistant, and plugin system. In Development.

PythonAIWorkspace
View on GitHub
web

CrackTheCode

Final year project - interactive cryptography and code-breaking challenge platform for learning security concepts.

PythonCryptoEducation
View on GitHub

// binary exploitation

Pwn & Exploit

01. Buffer Overflow

Stack-based buffer overflows, SEH overflows, and canary bypass techniques.

StackSEHCanary BypassShellcode

02. ROP Chains

Return-Oriented Programming for bypassing NX/DEP protections and achieving code execution.

ROPJOPret2libcROPgadget

03. Heap Exploitation

Use-after-free, heap overflow, double-free, and house-of techniques.

UAFHeap OverflowTcacheHouse of
exploit.py

from pwn import *


# Connect to target

p = remote("challenge.ctf.com", 1337)


# Build payload

payload = b"A" * 72

payload += p64(0x4011b0)

payload += p64(0x7ffd1234)


# Exploit

p.sendlineafter(b"> ", payload)

p.interactive()

// active directory

Domain takeover

01
01

Reconnaissance

  • BloodHound Enumeration
  • LDAP Recon
  • SPN Discovery
  • Group Policy Mapping
BloodHoundldapsearchPowerView
02
02

Initial Access

  • AS-REP Roasting
  • Kerberoasting
  • Password Spraying
  • NTLM Relay
RubeusImpacketCrackMapExec
03
03

Privilege Escalation

  • Token Impersonation
  • Unconstrained Delegation
  • DCSync
  • GPO Abuse
MimikatzImpacketCertify
04
04

Lateral Movement

  • Pass-the-Hash
  • Pass-the-Ticket
  • Overpass-the-Hash
  • WMI Execution
CrackMapExecEvil-WinRMPsExec

// tools

Toolbox

Reverse Engineering

Ghidra5/5
IDA Pro4/5
Frida5/5
WinDbg4/5
ghidaidafridawindbgpwndbg

Offensive Security

Burp Suite5/5
Nuclei5/5
Impacket5/5
BloodHound5/5
burpnucleiimpacketbloodhoundcertipy

Exploitation

Sliver4/5
Metasploit5/5
Certipy5/5
Nmap5/5
slivermsfcertipynmapffuf

Infrastructure

Docker5/5
Linux5/5
PostgreSQL3/5
GitHub Actions4/5
dockerlinuxpostgresredisgh-actions

// writeups

Research Journal

techniquehard

pwnlibc: Building a libc identification tool

Deep dive into how pwnlibc identifies libc versions from leaked addresses and automates exploit development workflow.

PythonExploit Devlibc
2024-08-01Read more →
toolmedium

Ghidra Automation with ghidra-open

How ghidra-open eliminates repetitive Ghidra setup with one-command project creation and headless analysis.

GhidraAutomationJava
2024-07-15Read more →
techniquehard

AD Attack Path Automation

Automating Active Directory attack paths from enumeration to domain compromise using BloodHound and Impacket.

ADBloodHoundImpacket
2024-06-20Read more →
techniqueinsane

Heap Exploitation Techniques

Comprehensive guide to modern heap exploitation including tcache poisoning, house of techniques.

PwnHeapLinux
2024-05-10Read more →

// certifications

Verified Credentials

ZER

CRTO

Zero-Point Security

View Details →
HTB

CPTS

Hack The Box

View Details →
INE

eWPTXv3

INE Security

View Details →
ZER

CRTA

Zero-Point Security

View Details →
API

ACP

APIsec

View Details →

// achievements

Recognition & Awards

NASA

NASA VDP Recognition

National Aeronautics and Space Administration

Recognized by NASA for identifying and responsibly reporting security vulnerabilities under NASA's Vulnerability Disclosure Policy.

2024View Details →

// linux

Tux Mastery

Exploit Development

Linux binary exploitation, kernel modules, and advanced exploitation techniques.

GDBpwndbgpwntoolsROPgadget

Security Tools

Building and using Linux-based security tooling and automation frameworks.

PythonBashDockerGitHub Actions

Infrastructure

Server management, containerization, and CI/CD for security research.

LinuxDockerPostgreSQLRedis
tools.sh

$ pwnlibc --help

Advanced libc identification toolkit

$ ghidra-open ./binary

Launching Ghidra with project...

$ nuclei -u target.com

Scanning for vulnerabilities...

$ _

// windows

Windows Offense

AD Attack Surface

Deep understanding of Active Directory attack vectors and exploitation techniques.

KerberosNTLMGPOACLsCertipy

Post-Exploitation

Windows privilege escalation, persistence, and credential harvesting.

MimikatzRubeusSliverCertify

Defense Evasion

Bypassing Windows security controls, EDR, and application whitelisting.

AMSIETWAppLockerWDAC
certipy.exe

PS C:\> certipy find -u user@corp.local -p Pass123

Found vulnerable ADCS templates...

PS C:\> certipy forge -ca-pfx ca.pfx

Forged certificate ready.

PS C:\> _

// contact

Get In Touch

$ echo "Let's connect"

GH

GitHub

@0xCyb3rgh0st

EM

Email

jatin@jatinsingh.com.np

LI

LinkedIn

Connect with me

philosophy.txt

$ cat philosophy.txt

Automation over repetition.

Research over noise.

Quality over quantity.

Tools over templates.

Knowledge over hype.

$ echo "Build tools that researchers trust."

Build tools that researchers trust.