Red Team Engineer
Researching modern endpoint detection mechanisms and their architectural limitations in controlled environments. Focused on adversary simulation and secure data handling.
All research conducted in controlled lab environments for defensive and educational purposes.
Adversary Simulation & Research
Infranova C2 Framework
Advanced Python/Flask C2 infrastructure with real-time geospatial dashboard, cross-platform agent support (Windows/Linux/Android), AES-256-GCM encrypted channels, and Telegram API as a covert fallback transport layer.
Venom C2 Framework
Advanced C++ infrastructure for researching stealthy command execution and EDR evasion via direct Syscalls.
BadUSB Exfiltrator
Hardware attack vector utilizing Telegram API for secure out-of-band data exfiltration simulation.
Technical Writeups
Unmasking WannaCry: A Hands-on Analysis of Ransomware Obfuscation
Deep-dive into a WannaCry variant — static entropy analysis, PEStudio inspection, x32dbg password recovery, and full payload extraction. Identified a unique SHA-256 not present on VirusTotal at time of analysis.
Deep-Dive Analysis of NjRAT (0.7D): From Anti-Analysis Bypass to C2 Extraction
Comprehensive analysis of NjRAT 0.7D — bypassed anti-process checks via dnSpy code patching, extracted hardcoded C2 configuration (host, port, persistence keys), and confirmed live exfiltration beacons via Wireshark.
Deep Dive: WinAPI Hook Evasion
Exploring the mechanics of user-mode hooks and implementing direct syscalls for architectural research.