Skip to content
View Addy-shetty's full-sized avatar
💭
I may be slow to respond.
💭
I may be slow to respond.
18 followers · 25 following

Achievements

Achievement: YOLOAchievement: Starstruck

Achievements

Achievement: YOLOAchievement: Starstruck

Highlights

  • Pro

Block or report Addy-shetty

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Addy-shetty/README.md

Hey 👋 I'm Harshith M S

I break things on purpose — then build tools so others can do it faster.

Bengaluru, India · 100+ Labs · Active VDP · Web + AI Sec


About

  • Application Security Engineer & Project Lead at GND Solutions, with a strong foundation in offensive security, VAPT, and cyber intelligence.
  • Previously worked with the Karnataka State Police (State Intelligence), uncovering 45+ web vulnerabilities contributing to real-world investigations.
  • Currently focused on AI-accelerated DevSecOps, AWS IAM hardening, and web/API security testing, while building open-source offensive tooling.

    • Profile Snapshot

    Role: Application Security Engineer & Project Lead
    Location: Bengaluru, India
    Former: Ethical Hacker & OSINT Analyst @ Karnataka State Police
    Arsenal: Penetration Testing · Bug Bounty / VDP · Web Exploitation · OSINT & Recon · AI Security · Python Tooling · Burp Suite · Linux / Kali · Nmap · JavaScript · LLMs · Docker · Git · OpenClaw

    Active Operations

    PITT — tooling Lightweight offensive utility focused on practical security testing workflows.
    Python Security · Repository ↗

    Vibe Prompting — open source Experimentation with prompt engineering techniques for smarter AI interactions.
    LLMs Prompt Engineering · Repository ↗

    Auto_XSS — automation Automated XSS detection tool for faster web vulnerability discovery.
    Python Web Security · Repository ↗

    Mission Timeline

    [07/2022 - 12/2022]  Cybersecurity Intern
                    Built foundations in networking, Linux administration,
                    and core security principles.
 
[09/2022 - 03/2025]  Ethical Hacker & Social Media Analyst — Karnataka State Police
                    VAPT, cyber intelligence, and dark-web OSINT monitoring.
                    Identified 25+ web vulnerabilities supporting investigations.
 
[03/2025 - Present]  Application Security Engineer & Project Lead — GND Solutions
                    STATUS: ACTIVE
                    Leading end-to-end technical projects with accelerated AI workflows.
                    Architecting DevSecOps pipelines (Jenkins, Snyk, Semgrep, SonarQube).
                    Hardening AWS IAM and performing web/API security testing.

    Community

    Bug Bounty Tips — 5.8k+ members A growing cybersecurity community focused on vulnerability research, writeups, and practical insights.

    • ⚡ Articles & curated security tips Blog
    • 🎙️ Talks, workshops, and knowledge sessions
    • 🤖 AI-powered meme agent for the community

    👉 Join here: Telegram

    Tool chains

    DevSecOps & Automation: Jenkins, GitHub Actions, Docker.

    • SAST/Code Quality: SonarQube, Semgrep, CodeQL.
    • SCA & Container Security: Trivy, Snyk, Dependabot.
    • IaC Security: Terraform, Checkov (Infrastructure as Code scanning).

    VAPT & Bug Bounty Tools: Burp Suite Professional, OWASP ZAP, Nmap, SQLmap, Metasploit, Wireshark, Postman (API).

    OSINT & Recon: Shodan, Maltego, SpiderFoot, Recon-ng, Google Dorks.

    AI Security & Development: Languages: Python, Bash (Scripting & Automation). AI Projects: Prompt Injection Testing Tool (PITT), Vibe Prompting, Adversarial LLM Testing.

    Outside the Terminal

    When not testing systems (with permission):

  • 🤖 Running an AI agent for cybersec Name Vulnops
  • 🎙️ Preparing For AWS SSA and Security Specialist/li>
  • 🔎 Hunting for one more valid finding
  • 🧠 Debating edge cases with LLMs

    • Thanks for stopping by ⭐ My Loving Projects

    Pinned Loading

    1. Pitt Pitt Public

      PITT is an open‑source, OWASP‑aligned LLM security scanner that detects prompt injection, data leakage, plugin abuse, and other AI‑specific vulnerabilities. Supports 90+ attack techniques, multiple…

      Python 4 3

    2. Vibe-Prompting Vibe-Prompting Public

      🎨 AI-Powered Prompt Generator | Transform ideas into powerful AI prompts instantly with smart credit system, real-time streaming, and 14 specialized categories. Built with React, TypeScript, Supaba…

      TypeScript 125 30

    3. Auto_xss Auto_xss Public

      auto_xss is a Bash script designed to automate the process of discovering XSS vulnerabilities in web applications. It integrates various tools to streamline the workflow from subdomain discovery to…

      Shell 6

    4. Cold_chain_intelligence Cold_chain_intelligence Public

      The Cold Room Operational Intelligence (COI) module continuously analyzes multiple sensor inputs---including temperature, humidity, door status, CO₂ concentration, configured temperature/humidity s…

      TypeScript