🛡️ Welcome to my GitHub! This repository serves as a diary of my practical cybersecurity training, write-ups, and hands-on laboratory projects.
I am actively training on TryHackMe to build practical, real-world skills in threat hunting, incident response, and secure development.
- Global Rank: #6323 (Top 1%)
- Learning Streak: 191+ days (Current Goal: 360 days)
- Capability Score: 89
- Rooms Completed: 302+
-
- Badges: 57
- Profile & Badges: View my TryHackMe Profile (NutCracker)
- ✅ Pre Security
- ✅ Cyber Security 101
- ✅ SOC Level 1
- ✅ SOC Level 2
- ✅ Web Fundamentals
- ✅ Jr Penetration Tester
- ✅ Security Engineer
- ✅ DevSecOps
- Implementing Secure SDLC: Manual Code Review and SAST Analysis
- Description: A deep-dive analysis of discovering and remediating LFI, SQLi, Command Injection, and XSS vulnerabilities in a vulnerable PHP application using secure coding practices and the Psalm SAST scanner.
- Network Anomaly Analysis (Nmap)
- Description: Network Anomaly Analysis: Detection and Deconstruction of Nmap Scanning.
- What is QUIC & HTTP/3? A Cybersecurity Perspective
- Description: Exploring QUIC & HTTP/3.
- Integrating Security Testing into the QA Process
- Description: A practical guide on how QA engineers can implement Shift-Left Security by integrating core web vulnerability checks, misconfiguration tests, and tools like OWASP ZAP and Burp Suite into their daily testing routines..
- AWS VPC Security: Network Defense Layers & Data Exfiltration
- Description: A practical study of how compromised IAM credentials can be used to systematically dismantle AWS network defenses — Route Tables, Security Groups, and Network ACLs — to exfiltrate data from a privately isolated EC2 instance. Based on a controlled TryHackMe exercise from the Attacking and Defending AWS learning path.