Hi, I'm
Parthasarathy.
Cybersecurity Researcher • Web & API Security • OSINT
I break things to understand how they work.
I believe the best hacks come from understanding how things are built.
Cybersecurity enthusiast and web application security researcher with a strong focus on OWASP Top 10 vulnerabilities. Active CTF player sharpening skills in offensive security.
Fuelled by curiosity and competition. When I'm not breaking things to figure out how they work, I'm building things to figure out how they break.
Kumaraguru College of Technology, Coimbatore
Curated Projects
$ python recon.py --target example.com
[*] Starting subdomain enumeration...
[+] Found: api.example.com
[+] Found: dev.example.com
[*] Port scanning...
[+] 80/tcp open http
[+] 443/tcp open https
[+] 8080/tcp open http-proxy
Automated Reconnaissance Tool
Built a Python tool automating subdomain discovery, port scanning, and directory fuzzing to streamline reconnaissance workflows. Integrates Nmap for port scanning and ffuf for directory brute-forcing.
$ python jwt_analyzer.py --token eyJhbG...
[*] Analyzing JWT token...
[!] Algorithm: none (CRITICAL)
[!] Weak secret detected
[+] Expiry: Valid (2h remaining)
[*] Signature: Not verified
⚠ Vulnerability Score: HIGH
JWT Security Analyzer
Developed a tool to analyze JWT tokens for misconfigurations such as alg=none bypasses, weak signing secrets, and expiry validation issues. Helps identify common JWT vulnerabilities.
Tech Arsenal
Security Domains
- Web/API Penetration Testing
- Secure Code Review
- OWASP Top 10
Offensive Tools
- Burp Suite, Metasploit, Nmap
- Nuclei, SQLMap, Nessus
- ZAP, Wireshark
Programming
- Python, Bash
- JavaScript, PHP, SQL
Cloud & Infra
- AWS, Azure
- Docker, Git
Networking
- TCP/IP, OSI Model
- Routing/Switching, VLANs
- HTTP/HTTPS, DNS
Operating Systems
- Linux (Kali, Ubuntu)
- Windows
Battle Log
Core Player, Student CTF Team
Member of NOVA, a top 5 ranked student-led CTF team in India, competing in national and global cybersecurity contests.