// about
5
Certifications
6
Open Source Tools
BSc
Ethical Hacking
VR
Vulnerability Research
Exploit Development
Linux & Windows
Reverse Engineering
Binary Analysis & Automation
Active Directory
Offensive Security
Web Security
Modern Web Exploitation
AI Security
AI-assisted Vulnerability Research
Cloud Security
Attack Surface Research
// skills
// projects
Advanced libc identification toolkit for exploit development. Fast libc identification, automatic download, symbol lookup, Python API, and CLI.
Hexadecimal analysis and parsing toolkit for binary analysis, CTF challenges, and exploit development.
CSRF vulnerability detection and exploitation framework for web application security testing.
// building the fundamentals
Building the foundations of Linux, networking, security tooling, and programming.
Building a foundation in Linux, including the command line, filesystem, permissions, processes, services, users, and system administration basics.
Learning the fundamentals of security tools such as Burp Suite, Nmap, Wireshark, and other tools used for reconnaissance, enumeration, and security testing.
Studying TCP/IP, DNS, HTTP, ports, protocols, routing, and how systems communicate across networks.
Developing small security and automation tools while improving programming and scripting skills for practical cybersecurity work.
// what i was learning
Moving from fundamentals into practical offensive security.
Studying Linux privilege escalation, enumeration, permissions, misconfigurations, and common paths from low-privileged access to root.
Preparing for the Certified Penetration Testing Specialist certification through practical labs, enumeration, exploitation, and penetration testing methodology.
Studying OWASP concepts and applying them to web application testing, focusing on authentication, authorization, injection, and common application vulnerabilities.
Getting hands-on with vulnerability discovery, validation, responsible disclosure, and developing a more methodical approach to security research.
// currently researching
What I'm working on right now. The messy middle, not the polished result.
Diving deeper into memory corruption, exploit development, debugging, and understanding binaries from the inside out.
Exploring security testing of AI systems, LLM applications, agentic workflows, prompt injection, and weaknesses across AI-integrated applications.
Working through Active Directory and Windows internals, focusing on authentication, privilege boundaries, enterprise attack paths, and understanding how Windows environments actually work.
// research journal
Gap analysis of OWASP's 2025 AI security risks against real-world LLM outputs. Testing local models for prompt injection, insecure code generation, and supply chain risks.
Deep dive into how pwnlibc identifies libc versions from leaked addresses and automates exploit development workflow.
How ghidra-open eliminates repetitive Ghidra setup with one-command project creation and headless analysis.
// unpopular opinions
Some opinions are better tested than repeated.
// achievements
// lessons learned
Started building a fully automated penetration testing framework. Realized halfway through that automating everything removes the critical thinking that makes pentesting valuable. The tool became a script collection that nobody would use.
lesson: Automation should augment human judgment, not replace it. Now I build tools that make specific tasks faster, not tools that try to do everything.
Spent months feeling like I didn't belong because I couldn't do kernel exploitation from scratch. Then I realized nobody can. Everyone Googles, everyone copies from their own old code, everyone struggles. The people who look effortless are just better at hiding the struggle.
lesson: Share the struggles, not just the wins. The security community needs more honesty about how hard this stuff actually is.
Real commit messages from my repos. The journey from confusion to understanding, one git commit at a time.
// learned from
The YouTube channels that shaped how I think about security. Every one of these people made me better.
// platforms
// contact
GitHub
@0xCyb3rgh0st
X (Twitter)
@0xCyb3rgh0st
Medium
@cyberghostnp
info@jatinsingh.com.np
jatin-singh-np
Open to relocation within EU
Eligible for UK/EU work visas
