I’m Sachin Nishad, a passionate Offensive Security Professional pursuing a BCA in (Cloud & Security). I specialize in penetration testing, red teaming, and real-world threat simulation, with hands-on experience in lab environments, capture-the-flag (CTF) competitions, and responsible disclosures.
On a mission to solve real-world security challenges and help build safer digital ecosystems.
🏆 Ranked Top 5% on TryHackMe | Active on HTB, CTFs
🔍 Core Focus: Web Security, AD Exploitation, Red Team Operations
| Area | Skills/Tools |
|---|---|
| 🔓 Web Pentesting | Identifying OWASP Top 10 issues, API flaws, authentication bypasses |
| 🧱 AD Exploitation | Performing Kerberoasting, Pass-the-Hash, lateral movement |
| 🌐 Network Attacks | Conducting scans with Nmap/Nessus, pivoting via Metasploit |
| 🐧 Linux Escalation | Exploiting misconfigs, SUIDs, vulnerable kernels |
| 🐞 Bug Hunting | Recon, fuzzing endpoints, and submitting responsible disclosures |
| ⚙️ Security Automation | Developing tools in Python/PowerShell for offensive use |
| 📄 Report Writing | Documenting findings with risk ratings and actionable remediations |
📚 Pentest Codex – Offensive Security Notes
| Name | Description |
|---|---|
| ⚙️ ReconStorm | Automated tool for initial reconnaissance and footprinting, performing subdomain enumeration & port scanning. |
| 📘 HTB-CPTS-Notes | Structured CPTS prep, offering comprehensive lab walkthroughs and key concepts. |
| 🧰 Bug-Bounty-Tools | A curated toolkit to streamline bug bounty workflows, including reconnaissance, directory brute force, and fuzzing. |
| 🧠 AD Attack Playbook | Collection of AD attacks + scripts to simulate realistic Red Team scenarios and understand common exploitation paths. |
| 🧱 Sysinternals Suite | Curated toolkit for Windows exploitation, live analysis, and post-exploitation. |
Offensive Security
- 🛡️ eJPT – INE eLearnSecurity Junior Penetration Tester
- 🎯 CPTS – (In Progress) Hack The Box Certified Penetration Testing Specialist
Defensive & Cloud
- ☁️ ICCA – INE Certified Cloud Associate
- 🔐 CNSP – Certified Network Security Practitioner (SecOps)
Other Notables
- 🧠 C3SA – Certified Cyber Security Analyst (CyberWarFare Labs)
- 🧰 EHE, TryHackMe Jr. Pentester Cert
- 🧨 OSCP Labs – Buffer overflows, privilege escalation, pivoting
- 🔍 Advanced Web – Business logic flaws, SSRF, SSTI, deserialization
- 🧱 AD Red Teaming – DCSync, ACL abuse, domain persistence
- ☁️ Cloud Hacking – AWS, Azure, GCP
- 🐳 Container Security – Privilege escalation in Docker/K8s
🔍 Recon | 🖥️ AD Misconfigs | ☁️ Cloud Exploits | ⚙️ Python Automation | 🧪 Lab Setup
- Email: sachinnishad.ceh@gmail.com