Skip to content
View White-Hat-007's full-sized avatar
🎯
Focusing
🎯
Focusing
9 followers · 11 following

Block or report White-Hat-007

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
White-Hat-007/README.md 


 ██████╗██╗   ██╗██████╗ ███████╗██████╗     ███████╗███████╗ ██████╗██╗   ██╗██████╗ ██╗████████╗██╗   ██╗
██╔════╝╚██╗ ██╔╝██╔══██╗██╔════╝██╔══██╗    ██╔════╝██╔════╝██╔════╝██║   ██║██╔══██╗██║╚══██╔══╝╚██╗ ██╔╝
██║      ╚████╔╝ ██████╔╝█████╗  ██████╔╝    ███████╗█████╗  ██║     ██║   ██║██████╔╝██║   ██║    ╚████╔╝
██║       ╚██╔╝  ██╔══██╗██╔══╝  ██╔══██╗    ╚════██║██╔══╝  ██║     ██║   ██║██╔══██╗██║   ██║     ╚██╔╝
╚██████╗   ██║   ██████╔╝███████╗██║  ██║    ███████║███████╗╚██████╗╚██████╔╝██║  ██║██║   ██║      ██║
 ╚═════╝   ╚═╝   ╚═════╝ ╚══════╝╚═╝  ╚═╝    ╚══════╝╚══════╝ ╚═════╝ ╚═════╝╚═╝  ╚═╝╚═╝   ╚═╝      ╚═╝

 ███████╗███╗   ██╗ ██████╗ ██╗███╗   ██╗███████╗███████╗██████╗
 ██╔════╝████╗  ██║██╔════╝ ██║████╗  ██║██╔════╝██╔════╝██╔══██╗
 █████╗  ██╔██╗ ██║██║  ███╗██║██╔██╗ ██║█████╗  █████╗  ██████╔╝
 ██╔══╝  ██║╚██╗██║██║   ██║██║██║╚██╗██║██╔══╝  ██╔══╝  ██╔══██╗
 ███████╗██║ ╚████║╚██████╔╝██║██║ ╚████║███████╗███████╗██║  ██║
 ╚══════╝╚═╝  ╚═══╝ ╚═════╝ ╚═╝╚═╝  ╚═══╝╚══════╝╚══════╝╚═╝  ╚═╝

⌁ SYSTEM IDENTITY ⌁

┌──────────────────────────────────────────────────────────────────────────────────┐
│                                                                                  │
│   > whoami                                                                       │
│   DARSH CHATRANI                                                                 │
│                                                                                  │
│   > cat /etc/role                                                                │
│   CYBER SECURITY ENGINEER                                                        │
│   Offensive Security  ·  Defensive Security  ·  AI Security                      │
│   Penetration Testing  ·  Threat Intelligence  ·  Security Research              │
│                                                                                  │
│   > cat /etc/location                                                            │
│   Chennai, India                                                                 │
│                                                                                  │
│   > cat /etc/education                                                           │
│   B.Tech Computer Science Engineering — Vel Tech University                      │
│   CGPA: 8.30 / 10                                                                │
│                                                                                  │
│   > cat /etc/status                                                              │
│   AUTHORIZED SECURITY RESEARCH // ACTIVE                                         │
│                                                                                  │
│   > echo $PHILOSOPHY                                                             │
│   "Control is an illusion. But sometimes you need                                │
│    the illusion to gain control."                                                │
│                                                                                  │
└──────────────────────────────────────────────────────────────────────────────────┘

I don't just look for vulnerabilities. I study the entire attack chain behind them — then I engineer the defense.


🛡️ CPT v3

CERTIFIED

🌍 TOP 7%

TRYHACKME 3M+ users

⚡ 100K+

EVENTS / SEC

🥇 1ST

190+ TEAMS

🧠 8.30

CGPA

⌁ CAPABILITY MATRIX ⌁

🔴 OFFENSIVE

VAPT
Web Application Security
Network Penetration Testing
AD Attacks & Kerberoasting
Privilege Escalation
Post-Exploitation
Credential Attacks
Lateral Movement
Session Hijacking
Password Cracking

🔵 DEFENSIVE

SIEM & Log Analysis
Threat Hunting
Incident Response
Honeypot Engineering
Detection Engineering
Intrusion Detection
Forensic Analysis
Hardening & Patching
Security Architecture
Automated Blocking

🤖 AI SECURITY

LLM Runtime Security
Prompt Injection Defense
Jailbreak Analysis
Agentic Security
Adversarial ML
AI Firewall Engineering
MITRE ATLAS Mapping
Multi-Provider Security
Model Security Auditing
AI Threat Detection

🕵️ INTELLIGENCE

Threat Intelligence
PCAP & Traffic Analysis
Adversary Profiling
MITRE ATT&CK Mapping
Malware Analysis
Reverse Engineering
Attacker Geolocation
Behavioral Analysis
TTP Correlation
Cyber Kill Chain

⌁ ENGINEERING ARSENAL ⌁

┌──────────────────────────────────────────────────────────────────────────────────┐
│  OFFENSIVE TOOLKIT                                                               │
│  Nmap · Burp Suite · Metasploit · SQLmap · Hydra · Gobuster · Netcat             │
│  John the Ripper · Hashcat · Nikto · Aircrack-ng                                 │
├──────────────────────────────────────────────────────────────────────────────────┤
│  FORENSICS & REVERSE ENGINEERING                                                 │
│  Wireshark · Zeek · Ghidra · Volatility · PCAP Analysis                          │
├──────────────────────────────────────────────────────────────────────────────────┤
│  DEFENSIVE & MONITORING                                                          │
│  Cowrie Honeypot · Fail2Ban · SIEM · Splunk · Log Analysis · Threat Hunt         │
├──────────────────────────────────────────────────────────────────────────────────┤
│  AI & LLM PROVIDERS                                                              │
│  OpenAI · Anthropic · Google Gemini · Mistral · Meta Llama · Groq                │
│  Cohere · HuggingFace · Together AI · Ollama                                     │
├──────────────────────────────────────────────────────────────────────────────────┤
│  PLATFORMS                                                                       │
│  Kali Linux · Parrot OS · Ubuntu · Windows Server/Client                         │
├──────────────────────────────────────────────────────────────────────────────────┤
│  FRAMEWORKS & STANDARDS                                                          │
│  OWASP Top 10 · MITRE ATT&CK · MITRE ATLAS · NIST CSF · Cyber Kill Chain         │
│  Command-and-Control (C2)                                                        │
└──────────────────────────────────────────────────────────────────────────────────┘

⌁ SIGNATURE SYSTEMS ⌁

🛡️ GhostPrompt

Enterprise AI Runtime Security Platform

+ 33-engine detection pipeline
+ 12-layer bidirectional inspection
+ 12+ AI providers secured
+ 17+ attack vectors neutralized
+ <15ms interception latency
+ MITRE ATLAS threat mapping
+ 9-framework compliance engine
+ RBAC + signed exports
+ Live SOC dashboard
+ Global Threat Origin Map

🕵️ DARKLAYR

Tor Traffic Forensic Correlation Engine

+ Zeek network telemetry
+ Live PCAP deep inspection
+ ASN intelligence feeds
+ Probabilistic correlation models
+ Network-layer forensic analysis
+ Endpoint deanonymization research
+ Forensic-oriented workflow

⚡ APT Intelligence Engine

High-Throughput Threat Intelligence Pipeline

+ 7 heterogeneous data sources
+ Kafka + REST API + SIEM ingestion
+ 100,000+ events/sec throughput
+ ATT&CK technique mapping
+ Automated threat fingerprinting
+ Unsupervised clustering
+ Thread-safe Python architecture

📡 Signal Stalker

Android RF & Network Reconnaissance

+ Wi-Fi intelligence gathering
+ Bluetooth device discovery
+ IoT signal collection
+ Cellular telemetry capture
+ GPS geolocation tagging
+ Persistent data collection
+ Authorized network mapping
$ ls -la /systems/classified/   ▸ MORE SECURITY SYSTEMS
System Classification Description
🔐 Encrypted Keylogger + Flask C2 RED TEAM AES-encrypted keylogging agent with Flask C2 server, remote session management, live keystroke exfiltration, master kill-switch
🕸️ Cowrie Honeypot + Fail2Ban BLUE TEAM Production-grade SSH/Telnet honeypot, automated blocking, real-time attacker IP geolocation, visual threat mapping
📱 Mobile Application Security Assessment OFFENSIVE Static reverse engineering of Android APKs via smali bytecode, exposed API endpoints, broken auth flows, insecure session management
⚡ Trojan Detection — Power Sector RESEARCH Malware detection research for critical infrastructure power-sector software

⌁ PROFESSIONAL EXPERIENCE ⌁

┌──────────────────────────────────────────────────────────────────────────────────┐
│                                                                                  │
│  [ONGOING]  INDEPENDENT SECURITY RESEARCHER                                      │
│  ─────────────────────────────────────────                                       │
│  > Investigated real-world WhatsApp Web session-hijacking incident               │
│  > Analyzed unauthorized session vectors & enforced termination                  │
│  > Documented defensive hardening recommendations                                │
│                                                                                  │
│  [JUL - OCT 2025]  FULL-STACK & ANDROID DEVELOPER INTERN                         │
│  iYarKai Tech Lab Pvt. Ltd.                                                      │
│  ─────────────────────────────────────────                                       │
│  > Engineered web & Android apps with secure backend integration                 │
│  > Applied OWASP secure coding practices throughout lifecycle                    │
│  > Identified & remediated backend auth vulnerability pre-production             │
│                                                                                  │
│  [MAY - JUN 2025]  CYBER SECURITY INTERN                                         │
│  Elevate Labs | Remote                                                           │
│  ─────────────────────────────────────────                                       │
│  > Designed encrypted keylogger with persistence & C2 exfiltration               │
│  > Replicated advanced post-exploitation workflows (real threat TTPs)            │
│  > Deployed production-grade Cowrie SSH/Telnet honeypot                          │
│  > Analyzed 50+ intrusion attempts for attacker behavioral profiling             │
│                                                                                  │
└──────────────────────────────────────────────────────────────────────────────────┘

⌁ OPERATIONAL METRICS ⌁

⌁ VERIFIED ACHIEVEMENTS ⌁

+ 🥇 1st Place — National Agentic AI Hackathon (190+ teams) | Prize: INR 15,000
+ 🥇 1st Place — ISTE National Paper Presentation, P.S.R Engineering College
+ 🎖️ Finalist — Tamil Nadu Police Hackathon 2025, Cyber Crime Wing
+ 🌍 National Rank 37 — TechXcelerate Hackathon, BITS Pilani Goa Campus
+ 🏆 Top 5% — ODOO × MSU FootPrints'25 National Hackathon
+ 🎯 Shortlisted — Smart India Hackathon (SIH) 2025
+ 🥉 3rd Place — Vel Tech AptiFind Technical Competition

⌁ CERTIFICATION STACK ⌁

⌁ ATTACK CHAIN ⌁

                            ╔═══════════════╗
                            ║     RECON     ║
                            ╚══════╤════════╝
                                   │
                            ╔══════╧════════╗
                            ║   ENUMERATE   ║
                            ╚══════╤════════╝
                                   │
                  ╔════════════════╧═══════════════╗
                  ║          EXPLOIT               ║
                  ╚════════╤═══════════════╤═══════╝
                           │               │
                  ╔════════╧════════╗ ╔════╧══════════════╗
                  ║  INITIAL ACCESS ║ ║ POST-EXPLOITATION ║
                  ╚════════╤════════╝ ╚════╤══════════════╝
                           │               │
                  ╔════════╧═══════════════╧═══════╗
                  ║     PRIVILEGE ESCALATION       ║
                  ╚════════════════╤════════════════╝
                                   │
                  ╔════════════════╧════════════════╗
                  ║   PIVOT / LATERAL MOVEMENT      ║
                  ╚════════════════╤════════════════╝
                                   │
              ╔════════════════════╧════════════════════╗
              ║            CORRELATE & DETECT           ║
              ╚════════════════════╤════════════════════╝
                                   │
              ╔════════════════════╧════════════════════╗
              ║         CONTAIN & HARDEN               ║
              ╚════════════════════════════════════════╝

ATTACK SURFACE → ATTACK CHAIN → TELEMETRY → DETECTION → HARDENING

⌁ ADDITIONAL INTEL ⌁

┌──────────────────────────────────────────────────────────────────────────────────┐
│                                                                                  │
│  > cat /etc/education                                                            │
│  B.Tech in Computer Science Engineering — Vel Tech University (2023 – Present)   │
│  CGPA: 8.30 / 10                                                                 │
│                                                                                  │
│  > cat /etc/languages                                                            │
│  English · Hindi · Tamil · Sindhi · Gujarati                                     │
│                                                                                  │
│  > cat /etc/memberships                                                          │
│  IEEE Student Member — Vice Chairperson & Secretary                              │
│  TryHackMe Premium — Top 7% Global                                               │
│                                                                                  │
│  > cat /etc/leadership                                                           │
│  Spearheaded organization of inter-collegiate hackathons,                        │
│  technical competitions, and STEM outreach at Vel Tech University                │
│                                                                                  │
└──────────────────────────────────────────────────────────────────────────────────┘

⌁ CONNECT ⌁

┌──────────────────────────────────────────────────────────────────────────────────┐
│                                                                                  │
│   "I didn't start hacking because I wanted to break things.                      │
│    I started because the world was already broken."                              │
│                                                                                  │
│   Security fails where comfort begins.                                           │
│   I don't audit checklists. I execute attack chains.                             │
│   Then I build the walls that stop them.                                         │
│                                                                                  │
│   Think like an attacker. Engineer like a defender.                              │
│                                                                                  │
│   — Darsh Chatrani                                                               │
│                                                                                  │
│   $ connection_terminated                                                        │
│   $ session_encrypted                                                            │
│   $ goodbye, friend.                                                             │
│                                                                                  │
└──────────────────────────────────────────────────────────────────────────────────┘

Pinned Loading

  1. APT-Intelligence-Engine APT-Intelligence-Engine Public

    A real-time, multi-modal telemetry ingestion and behavioral threat intelligence engine with MITRE ATT&CK mapping and unsupervised K-Means clustering.

    Python 1

  2. DARKLAYR---Tor-Traffic-Forensic-Correlation-Engine DARKLAYR---Tor-Traffic-Forensic-Correlation-Engine Public

    Forensic correlation engine for Tor traffic analysis using Zeek, ASN intelligence, and probabilistic attribution - built for ethical cybercrime investigation workflows.

    Python 1

  3. Mobile-Application-Reverse-Engineering-Analysis Mobile-Application-Reverse-Engineering-Analysis Public

    Advanced mobile application reverse engineering and mobile security research focused on authentication workflows, backend communication analysis, networking stack reconstruction, and encrypted loca…

    1

  4. PROJECT-Cowrie-Honeypot-Fail2Ban-IP-Geolocation-Visualizer PROJECT-Cowrie-Honeypot-Fail2Ban-IP-Geolocation-Visualizer Public

    Cowrie SSH honeypot + Fail2Ban auto-blocking + attacker IP geolocation dashboard

    1

  5. PROJECT-Keylogger-with-Encrypted-Data-Exfiltration PROJECT-Keylogger-with-Encrypted-Data-Exfiltration Public

    AES-encrypted keylogger with Flask C2 exfiltration server — red team simulation

    Python 1 1

  6. GhostPrompt---AI-LLM-Security GhostPrompt---AI-LLM-Security Public

    AI Runtime Security & Operations Platform — Enterprise-grade firewall for Large Language Models with 33 detection engines, real-time threat intelligence, and complete AI observability.

    Python 1