Available for security work

Raghav Sharma

$

B.Tech CSE student and hands-on security practitioner. I find and responsibly disclose vulnerabilities, build AI-powered offensive tooling, and spend my time breaking things so they can be fixed.

Download Résumé Get in touch
  • 0CVEs disclosed
  • 0Certifications
  • 0Security tools built
Portrait of Raghav Sharma
scroll
01

About

I'm a cybersecurity student at ABESIT, Ghaziabad, focused on offensive security — web application pentesting, network exploitation, and vulnerability research. My work sits where AI meets security tooling: automating reconnaissance, payload generation, and threat triage.

Outside of coursework I hunt bugs, publish CVEs, and build the tools I wish existed. I hold CRTA, CNSP, and Microsoft SC-200 certifications and I'm currently working on red team operations.

Location
Ghaziabad, IN
Focus
Offensive Security
Education
B.Tech CSE · ABESIT
Status
Open to work

Networking

  • TCP/IP
  • HTTP/HTTPS
  • DNS
  • SSH
  • FTP
  • JWT

Security Monitoring

  • Log Analysis
  • Splunk
  • Risk & Compliance Assessment
  • Incident Response

Security Tools

  • Burp Suite
  • Nmap
  • Metasploit
  • Nuclei
  • Wireshark
  • Searchsploit

AI / ML Security

  • LLM Integration
  • AI-driven Threat Detection
  • Prompt-based Payload Generation

Offensive

  • VAPT
  • Network Pentesting
  • OSINT
  • CVE Research
  • Risk Rating

Frameworks & Methodologies

  • OWASP Top 10
  • MITRE ATT&CK

Programming

  • Python
  • Bash
  • PowerShell
  • JavaScript
  • HTML
  • CSS

OS / Cloud

  • Kali Linux
  • Ubuntu
  • Windows 11
  • AWS

Platforms & VCS

  • TryHackMe
  • HackTheBox
  • PortSwigger Web Security Academy
  • Git
  • GitHub
02

Experience & Education

  1. Cybersecurity Intern

    Jun 2025 — Jul 2025

    ENCODERSPRO Private Limited · Remote

    • Performed VAPT against staging environments, identifying OWASP Top 10 vulnerabilities with CVSS-based risk ratings and delivering prioritised remediation reports.
    • Ran black-box network penetration tests (Nmap, Metasploit) to enumerate services and validate firewall rules; conducted OSINT across 10+ targets.
    • VAPT
    • Nmap
    • Metasploit
    • OSINT

  2. B.Tech — Computer Science & Engineering

    Oct 2023 — May 2027

    ABESIT · Ghaziabad, Uttar Pradesh

    • Coursework in networking, operating systems, cryptography, and application security.
    • Parallel hands-on practice across TryHackMe, HackTheBox, and PortSwigger Web Security Academy.
    • In progress
    • Networking
    • Cryptography
03

Projects

WAPT AI

AI-powered web application penetration testing framework that combines traditional scanning with dynamic, LLM-generated payloads.

  • Python
  • Pentesting
  • AI/LLM
Details

ReconMind

Autonomous recon pipeline that chains enumeration → probing → crawling → vuln sweeps, with Claude-driven triage.

  • Python
  • Recon
  • Automation
Details
04

CVE Disclosures

Responsibly disclosed vulnerabilities credited to me in the CVE program — all fixed by the vendor in the referenced releases.

CVE-2026-75916 Critical

SiYuan XSS-to-RCE via unescaped block metadata in hint popup

Block name, alias and memo fields are joined into the (( reference autocomplete popup HTML without escaping in genHintItemHTML(). A crafted block self-fires on search, escalating to OS command execution via Electron.

SiYuan ≤ 3.7.3 CVSS 4.0: 9.3 CWE-79
  • XSS
  • RCE
  • Electron
CVE-2026-75917 Critical

SiYuan before v3.7.4 XSS-to-RCE via pathName.ts

The file-tree picker's hover tooltip builds an aria-label from document metadata without escaping in pathName.ts. A double quote breaks out of the attribute and injects an event handler, reaching child_process on hover.

SiYuan < 3.7.4 CVSS 4.0: 9.3 CWE-79
  • XSS
  • RCE
  • Electron
CVE-2026-82653 Critical

SiYuan before v3.8.1 stored XSS via confirmDialog

confirmDialog() inserts package and notebook names into innerHTML without escaping. A malicious bazaar package whose name carries HTML executes when a user uninstalls a package or unlocks an encrypted notebook.

SiYuan < 3.8.1 CVSS 4.0: 9.3 CWE-79
  • Stored XSS
  • Supply Chain
  • Electron
05

Certifications

Certified Red Team Analyst certificate

Certified Red Team Analyst (CRTA)

CyberWarfare Labs

Issued Feb 2026

Hands-on red teaming examination validating practical offensive security and adversary simulation skills.

Verified
Microsoft SC-200 certificate

Security Operations Analyst (SC-200)

Microsoft

Issued Aug 2026

Detecting, investigating and responding to threats with Microsoft Defender and Microsoft Sentinel.

Verified
Certified Network Security Practitioner certificate

Certified Network Security Practitioner (CNSP)

The SecOps Group

Issued Jan 2026

Practical network security exam covering threat detection, defence configuration and real-world security operations.

Verified
Certified Social Engineering Defense Practitioner certificate

Social Engineering Defense Practitioner (CSEDP)

The SecOps Group

Issued Jan 2026

Detecting manipulation tactics and protecting organisations from deception-driven attacks.

Verified
06

Writeups

CTF · 2026-07-12

Fampay FAM CTF — Full Writeup (All 6 Challenges)

A mobile / web / cloud CTF chain — from reversing an Android APK and abusing Firebase, to native binary RE, JWT forgery and an SSRF → IMDS → S3 privilege escalation on a live EC2 instance.

  • Android
  • Firebase
  • AWS
  • SSRF
  • Reversing
Read writeup
All writeups
07 — Contact

Let's find something
worth fixing.

Open to security internships, pentesting engagements, and collaboration on offensive tooling. The fastest way to reach me is email.

wrk.raghav@gmail.com
GitHub LinkedIn Instagram Résumé