_ __ _ __ __ _ _ | |/ / / \ | \/ | / \ | | | ' / / _ \ | |\/| | / _ \ | | | . \ / ___ \| | | |/ ___ \| |___ |_|\_\/_/ \_\_| |_/_/ \_\_____|
HELLO, I'M KAMAL!
I'm a final-year Cybersecurity student at Vilnius University Kaunas Faculty. I focus on penetration testing, red teaming, digital forensics, and defensive security. I love breaking things ethically to understand how to build them stronger — whether it's a web app, a network, or an AI-driven IDS.
|
🎓 Education: Final-year BSc in Information Systems and Cyber Security, Vilnius University 📘 Additional Training: Cyber Security (Online) – 10 month course, Code Academy. Finished with High-Honour Diploma 📜 Certifications: CompTIA Security+, HTB CPTS, eJPT, CRTA, Sliver C2 🧪 Experience: Cybersecurity Intern @ Extramus EU; Student Intern @ UAB NOD BALTIC (ESET Antivirus Lietuva) |
🎯 Focus: Penetration testing, red teaming, digital forensics, malware analysis, network security, AI-driven IDS 🚀 Goal: Senior Red Team Operator 📚 Currently preparing for: CRTO (Certified Red Team Operator) exam 🛠️ Open Source: TornadoRevC2, XXERipper, CorsRipper, AI-based IDS, StaticSentinel, Libvirt/KVM migration tool 📌 Bachelor Thesis: AI-Powered Intrusion Detection System using ML, behavioral heuristics, and threat intelligence ⚡ Approach: Ethical hacking, build-to-defend, automate repetitive security work, document everything. |
Offensive Security: Penetration testing (web, OS, network, infrastructure), Active Directory enumeration & attack-path analysis, vulnerability assessment, exploit development. Digital Forensics & Malware Analysis: Evidence analysis, incident investigation, reverse engineering of malicious code, threat detection, data recovery. Defensive Security: SIEM/IDS/IPS/WAF deployment (Wazuh, Suricata, ModSecurity, SafeLine), NGFW configuration (Palo Alto VM-Series), network segmentation, hardening. AI & Automation: AI-driven intrusion detection using machine learning, behavioral analysis, Python/Bash scripting for security automation, tool development. |
Languages & Scripting OS & Infrastructure Reconnaissance & OSINT Web Application Security Active Directory & Internal Command & Control / Exploitation Credential Access & Cracking Pivoting & Tunneling Cloud & Container Security Forensics, RE & Malware Analysis Wireless & Hardware Defensive Stack |
|
[TornadoC2] Pull-Based Command & Control Framework Pull-based C2 built for long-haul engagements. Ten native transports with automatic failover between HTTP, DNS, and DoH. The Go agent is compile-time configured — no config file, no env var, no CLI args — signs tasks and results with ECDSA P-256, and wraps every wire body in an AES-256-GCM envelope keyed off a P-256 ECDH exchange. The Python team server ships RBAC with a distinct guardian role, a hash-chained audit log, concurrent multi-profile handlers on one port, a credential vault with beacon-side validation, a content-addressed loot store, team chat with forensic preservation, and a runtime-armable dead-man's switch. The implant runs thirty native in-process verbs, four sleep-mask modes, indirect syscalls, and a peer-to-peer pivot model with its own cryptographic identity. |
[TornadoRevC2] Modular Post-Exploitation Framework Modular post-exploitation framework for authorised red-team engagements. Interactive reverse/bind shells over TCP/TLS/mTLS and a cross-compiled Go beacon with compile-time configuration and ECDSA-signed tasking. 65 plugins spanning credential theft, AD analysis, privilege escalation, SOCKS5 pivoting, in-memory PE/ELF and BOF execution, remote sessions over SSH/WinRM/SMB/WMI, and SHA-256 verified file transfer. |
|
[XXERipper] Black-Box XXE Scanner Open-source XXE scanner supporting 30+ attack techniques (in-band, blind/OOB, SSRF, cloud metadata, WAF bypass). Features differential parser fingerprinting, confidence scoring, and JSON/SARIF/HTML reporting. |
[CorsRipper] Advanced CORS Security Assessment Detects and correlates exploit chains: credentialed CORS, CSRF bypass, OAuth token exposure, WebSocket Origin trust, GraphQL introspection, CDN cache poisoning, postMessage abuse, and timing side channels. |
|
[Enterprise AI-based IDS] AI-Powered Intrusion Detection System Modular network security monitoring platform combining real-time packet capture, hybrid AI models, behavioral heuristics, and threat intelligence. Flask dashboard, Zeek integration, multi-process resilient architecture. |
[StaticSentinel] YARA-based Static Malware Analysis Assesses files without executing them using YARA rule matching, entropy analysis, SHA-256 hashing, and VirusTotal lookups. Heuristic scoring reduces false positives and provides human-readable verdicts. |
|
[Libvirt/KVM VM Migration Tool] Data-Integrity-First VM Export/Import Open-source utility for exporting and importing KVM virtual machines. Every file SHA-256 verified, qcow2 backing chains validated, authenticated encryption with GnuPG and OpenSSL, plus hardening against twelve classes of Bash failure modes. |
┌──[kamalx06@parrot]──[~] │ │ $ whoami │ pentester │ │ $ cat /etc/role │ red_teamer │ │ $ cat /etc/goal │ senior_red_teamer │ └──╼ $ |
kamalx06@github |