Building tools at the intersection of automation, cloud infrastructure, and offensive security.
- 🔭 Working on: DevOps engineering, Cloud-native tooling, FinOps automation, and Kubernetes platform engineering
- 🛡️ Researching: Cloud security, container hardening, and supply-chain risk in CI/CD
- 🛠️ Building: Python automation that turns toil into pull requests
- 🤝 Open to: Collaborating on open-source security & DevOps projects
- 💬 Ask me about: Python · Pentesting · Kubernetes · Cloud Security · DevSecOps
- ⚡ Fun fact: I treat every shell as a Python REPL waiting to happen
|
🛰️ Reconator
Automated reconnaissance framework for ethical hackers. Chains subdomain enumeration, port scanning, and vulnerability discovery into a single workflow. 
|
🔧 Kustomize → Helm Migrator
Production-grade framework for migrating Kubernetes Kustomize overlays into idiomatic Helm charts at scale. 
|
|
📚 Pentesting Resources
Curated playbook of techniques, payloads, and tooling references from real bug-bounty engagements. 
|
🔍 Wappalyzer CLI
Fast CLI port of Wappalyzer for fingerprinting web technologies during recon — no browser required. 
|
👨💻 Languages
🧪 Frameworks & Libraries
☁️ Cloud & Infrastructure
🚀 CI/CD & DevOps
📊 Observability & Platform
🗄️ Databases
🛡️ Security & Pentesting
🖥️ Operating Systems & Tools
- 🏅 Google Hall of Fame for a security vulnerability disclosed in Google Hangouts
- 🐞 100+ vulnerabilities responsibly disclosed across bug-bounty programs
- 🔍 Published research on Docker and cloud-misconfiguration flaws
- ⚡ Authored a Python tool that auto-scans Docker images for leaked secrets and pages on detection
- 🌍 Active open-source contributor to security and DevOps tooling
"Automate the boring. Break the broken. Ship the rest."
⭐ From gokulapap — if any of this helped, drop a star on a repo.