• Active Directory attack paths — Kerberoasting, AS-REP Roasting, Golden/Silver Tickets, DCSync
• Chaining low/medium findings into critical attack paths on live red team engagements
• Building agentless PowerShell threat-hunting tooling from native Windows telemetry
• Mobile application reverse engineering — static/dynamic analysis, Frida instrumentation, APK teardown
• Responsible disclosure workflows and coordinating with vendor security teams (incl. NASA VDP)
• Bridging offensive security findings into SOC-ready SIEM detections

• Identified critical vulnerabilities in production public-facing NASA systems through authorized testing
• Developed and submitted proof-of-concept exploits with detailed remediation guidance
• All findings accepted and patched by the NASA security team
• Demonstrated disciplined operation within legal scope boundaries and responsible disclosure timelines

• Identified critical vulnerabilities in production public-facing NASA systems through authorized testing
• Developed and submitted proof-of-concept exploits with detailed remediation guidance
• All findings accepted and patched by the NASA security team
• Demonstrated disciplined operation within legal scope boundaries and responsible disclosure timelines

Architected an agentless, zero-dependency PowerShell framework ingesting native Windows telemetry — Event Logs, Sysmon, Defender, Registry, WMI, Scheduled Tasks — across 6 modular risk-classification engines.

FINDINGS  →  7 Critical  |  71 High-risk  (from 6,000+ telemetry events)

DETECTED  →  PowerShell execution policy bypass
             COM object abuse (MITRE T1546.015)
             Local group enumeration reconnaissance
             Registry-based persistence mechanisms

OUTPUT    →  Dark-themed HTML dashboard
             Sortable risk-prioritized tables
             Modular CSV exports for SIEM ingestion / SOC handoff

Full-cycle security assessment of a deliberately vulnerable Android application, mapped to OWASP MASVS, MITRE ATT&CK Mobile, and scored with CVSS 3.1.

STATIC     →  JADX-GUI / apktool decompilation, manifest & permission audit
DYNAMIC    →  Frida & Objection instrumentation, runtime hooking, SSL pinning bypass
NETWORK    →  Burp Suite MITM proxy, Wireshark capture, cleartext HTTP transmission analysis
EXPLOIT    →  Hardcoded crypto keys, insecure local storage, exported component abuse

Methodology-driven assessments against Juice Shop, DVWA, and PortSwigger Web Security Academy, aligned with OWASP Testing Guide v4.2.

Authorized penetration test against Ubuntu 16.04.3 LTS identifying ProFTPD 1.3.3c backdoor — a decade-old unpatched vulnerability exposing unauthenticated remote root access.

RECON      →  Nmap service/version enumeration identified ProFTPD 1.3.3c on non-standard port
RESEARCH   →  Correlated version fingerprint to CVE-2010-4221; validated backdoor presence
EXPLOIT    →  Weaponized Metasploit module → unauthenticated root-level RCE
POST-EXPL  →  /etc/shadow extraction · process enumeration · lateral movement analysis

Snake game (contribution grid animation):

1. In the vetementsvmnts/vetementsvmnts profile repo, add .github/workflows/snake.yml using Platane/snk.
2. The action pushes rendered SVGs to an output branch on a schedule (e.g. every 24h).
3. Reference the output branch SVGs via raw.githubusercontent.com as shown above.

Activity graph / stats / streak / trophies: These are hosted, self-updating services that read live from the GitHub API — no action required, just reference the image URL with your username. If a service is rate-limited or down, self-host it by forking the corresponding repo and deploying to Vercel.