Penetration tester and red team analyst with 3+ years of combined experience across web, API, network, and cloud environments — finding what your defenses missed.
Aggregated and deduplicated from 6 sources: The Hacker News, Krebs on Security, Dark Reading, CSO Online, SANS ISC, and CISA Advisories.
I'm Vineet Vishesh — a penetration testing specialist and offensive security researcher based in India. I operate across web applications, mobile platforms, network infrastructure, APIs, and cloud environments with a single objective: surface what others overlook.
3+ years of combined experience spanning web/API application security testing, SOC and detection engineering, and technical training — currently working as a Cybersecurity Engineer conducting VAPT and SIEM detection engineering, delivering technical depth paired with executive-ready reporting.
Currently preparing for OSCP certification while building advanced tooling for scalable offensive operations. Every engagement is operator-led, methodical, and designed to produce actionable outcomes — not checkbox compliance.
Manual exploitation first. Tools support the operator, not the other way around.
Technical findings translated to risk language executives understand and act on.
Active research, certification pursuit, and offensive tooling development.
Joined IIHT, Bengaluru as a Technical Trainer, delivering instructor-led CCNA, networking, Linux, and cybersecurity training with hands-on labs in TCP/IP, DNS, HTTP/S, routing/switching, and secure configuration.
Wrapped up the training role and began focused study toward penetration testing and VAPT, building hands-on skills with Burp Suite, Nessus, Nmap, and OWASP Top 10 / API Top 10 methodology.
Joined CYFY as a Cybersecurity Engineer, conducting web/API VAPT with PoC-backed reporting and remediation tracking, and engineering SIEM detections for AWS and Google Workspace logs aligned to MITRE ATT&CK.
Earned the Certified Red Team Analyst (CRTA) credential from Cyberwarfare Labs, alongside CompTIA Security+. Began OSCP preparation and advanced exploit research.
Active VAPT engagements and SOC detection work at CYFY, red team research on the side, and continued progress toward OSCP.
Comprehensive attack surface mapping. OSINT, subdomain enumeration, service fingerprinting, and technology identification before any active testing.
Manual-first approach to vulnerability discovery. Authentication bypass, injection attacks, business logic flaws, and privilege escalation chains.
Dual-audience deliverables: technical depth for engineering teams, risk-prioritized executive summaries with clear remediation paths and business impact.
Post-engagement verification testing. Validate fixes, retest vulnerabilities, and ensure remediation doesn't introduce new attack vectors.
Scalable intelligence gathering system processing 10,000+ records per hour from 15+ data sources with real-time entity extraction, correlation, and threat scoring.
Advanced research tool generating unique privilege escalation payloads with code mutation engine, anti-analysis capabilities, and 12+ escalation techniques for authorized security validation.
Developed in isolated lab environments for authorized red team research only.
Web and API-focused VAPT using Burp Suite, Nessus, and manual validation, mapped to OWASP Top 10 / OWASP API Top 10 and CVSS, with PoC-backed findings and retest verification.
Security assessment methodology for Android and iOS platforms, covering runtime manipulation, API interception, binary analysis, and insecure data storage.
SIEM detection engineering and telemetry analysis across AWS and Google Workspace logs, with MITRE ATT&CK-aligned correlation rules and SOC alert investigation.
Independent apps and tools built end-to-end — design, engineering, and release. Separate from client/employer security work above.
A Hindu calendar app covering daily Panchang (tithi, nakshatra, yoga, karana, sunrise/sunset, Rahu Kaal), upcoming vrat and festival dates, daily Rashifal, and free Kundli (birth chart) generation — Ascendant, all nine grahas, Vimshottari Dasha timeline, and a Yoga-Dosha summary. Supports 37 Indian cities, 9 languages, and both Amanta and Purnimanta calendar views. Core Panchang calculations run on-device, no account required.
TithiPath is in Google Play Closed Testing right now. Join as a tester to help it reach production — install once, no action needed after that.
Small tools built from the same offensive-security background as the work above — free to use, no account required.
Security headers, SSL/TLS, DNS, on-page SEO, and real Lighthouse performance scoring — for any public URL, in one report.
Run a ReportSecurity headers, SSL/TLS, DNS, on-page SEO, and real Lighthouse performance — checked live, for any public site.
Takes up to ~30 seconds — the performance score runs a real Lighthouse audit via Google PageSpeed Insights.
Aggregated and deduplicated from 6 sources — The Hacker News, Krebs on Security, Dark Reading, CSO Online, SANS ISC, and CISA Advisories.
Full-scope adversary simulation from initial access through lateral movement and objective completion. Realistic threat emulation to validate detection and response capabilities.
Deep-dive manual testing of web applications for OWASP Top 10 and beyond. SQL injection, XSS, SSRF, authentication bypass, business logic abuse, and API-level exploitation.
Android and iOS security assessments including static/dynamic analysis, runtime instrumentation, certificate pinning bypass, and insecure storage identification.
Automated and manual intelligence gathering pipelines. Attack surface mapping, data exposure identification, credential intelligence, and organizational footprinting.
Network and cloud infrastructure assessments including service enumeration, privilege escalation, Active Directory attacks, and cloud misconfigurations across AWS and Azure.
Offensive tool development, vulnerability research, exploit validation, and evasion technique analysis. Building custom tooling for scalable security operations.
CYFY Pvt Ltd, Bengaluru
Web/API VAPT using Burp Suite, Nessus, and manual validation mapped to OWASP Top 10 / API Top 10 and CVSS. SIEM detection engineering for AWS and Google Workspace logs with MITRE ATT&CK-aligned correlation rules.
IIHT, Bengaluru
Delivered instructor-led CCNA, networking, Linux, and cybersecurity training with hands-on labs for TCP/IP, DNS, HTTP/S, routing/switching, and secure configuration.
Whether you need a controlled offensive assessment, an independent security review, or want to discuss a red team engagement — I'm available for the right projects.
A scalable intelligence gathering system designed to process 10,000+ records per hour from 15+ open-source data providers with real-time entity extraction, cross-source correlation, and automated threat scoring.
Manual OSINT collection was consuming 60+ analyst hours per engagement. Data from disparate sources required manual correlation, and intelligence reports were taking 3-5 days to compile. The client needed a way to scale reconnaissance without proportionally scaling headcount.
Designed a microservice architecture with message queues for async processing. Each data source gets its own collector module with rate limiting and retry logic.
Built Scrapy-based crawlers for 15+ sources including WHOIS, DNS records, social media APIs, paste sites, certificate transparency logs, and breach databases. Each crawler implements source-specific parsing and normalization.
NLP-based entity extraction identifies people, organizations, domains, IPs, and emails. Cross-source correlation engine links entities across data sources using fuzzy matching and graph relationships.
Automated risk scoring based on data freshness, source reliability, and threat indicators. Generates structured JSON reports and executive-ready PDF summaries with visualization of entity relationships.
An advanced security research tool that generates unique privilege escalation payloads through code mutation, targeting 12+ escalation techniques across Windows environments for authorized security validation.
Authorized Research Only — Developed in isolated lab environments for authorized red team research only. All testing conducted with explicit authorization. Findings responsibly disclosed to affected vendors.
Traditional privilege escalation tools produce static signatures that are immediately flagged by modern EDR solutions. Red team operators need payloads that bypass signature-based detection while maintaining reliable escalation across diverse Windows configurations. This research aimed to bridge the gap between theoretical evasion techniques and practical operational tooling.
Cataloged 12+ Windows privilege escalation vectors including token impersonation, service misconfigurations, DLL hijacking, registry abuse, unquoted service paths, and kernel exploits. Each technique mapped to specific Windows versions and patch levels.
Developed a polymorphic code mutation engine that transforms payload structure, control flow, variable naming, and API call patterns while preserving functional equivalence. Each generated payload produces a unique hash signature.
Integrated sandbox detection, timing-based evasion, and environment fingerprinting to prevent automated analysis. Payloads self-modify execution paths based on detected analysis environment.
Built automated testing pipeline with 20+ Windows VM configurations. Each generated payload tested against major AV/EDR solutions to validate evasion effectiveness and escalation reliability.