Headline

Security Analyst · VAPT · Burp Suite · Python Automation | Built BugHawk AI (CVE/NVD Platform) | Local LLM Security | MSC Cyber Security 9.7 SGPA

About

Most scanners find the obvious. I find what they miss — then I automate the discovery of everything else. Currently pursuing MS in Cyber Security & Digital Forensics (SGPA: 9.7) while operating at the intersection of offensive security and AI-powered tooling. At Specurity Pvt. Ltd., I assessed 25+ production web applications end-to-end — from recon and exploitation through documented PoCs and CVSS-scored remediation reports. What makes me different: I build the tools, not just run them. → BugHawk AI — Flask-based automated vulnerability platform that orchestrates Nmap, Nikto, and Dirsearch across targets, auto-queries CVE/NVD APIs, prioritizes findings by CVSS, and generates client-ready reports. Built this before my internship. → SentinelChain — POCSO-compliant harmful content reporting system running local LLMs (llama3.2:3b + llava-phi3 via Ollama) for fully on-device classification. SHA-256 hash-chained audit log. JWT-secured admin interface hardened against XSS, SQLi, and privilege escalation. My toolkit spans both offensive and engineering sides: Burp Suite · Metasploit · SQLmap · Nmap · Nikto · Wireshark · Dirsearch · Gobuster · Python · Bash · Kali Linux · Local LLMs Currently targeting: • Application Security Engineering • Security Automation & Tooling • VAPT / Penetration Testing roles • AI-powered security research If you're working on hard security problems — let's connect.

Location

Ahmedabad

Work experience

Specurity | Penetration Tester (VAPT Intern) February 2026 – May 2026 · Gandhinagar, India at Specurity, Jan 2026 - Apr 2026 · 4 mos, Gandhinagar, Gujarat, India, Conducted end-to-end vulnerability assessments on 25+ client production web applications, using Nmap, Burp Suite, and Metasploit to identify critical OWASP Top 10 flaws — including SQL Injection, XSS, IDOR, and broken access controls Analyzed live HTTP/S traffic using Wireshark and Burp to isolate session-handling vulnerabilities and insecure API endpoints; built step-by-step PoCs for every finding to ensure full reproducibility by client dev teams Authored professional penetration test reports with CVSS v3 severity scoring and actionable remediation guidance — delivered directly to clients and used for production patching prioritization Assisted senior engineers in simulated lateral movement exercises — observing pivot techniques across segmented internal environments in controlled lab settings

Education

Msc it, Cyber security & digital forensics, Gandhinagar university

B.Sc. Computer Applications & Information Technology (CA&IT), Krantiguru Shyamji Krishna Verma Kachchh University, Kachchh (Gujarat)