~/anurag $ whoami

Cybersecurity · DevSecOps

Breaking systems
to make them
stronger.

A security engineer crafting resilient systems at the intersection of offense, infrastructure, and intent.

Explore Work Get in Touch

A Jr. Cybersecurity Engineer blending offensive security expertise with software engineering to build resilient systems.

From penetration testing and API security to Kubernetes policy enforcement, I work at the intersection of security and infrastructure.

Learn more about me
30 % Reduction in repeat security issues
5 + API endpoints secured
10 % Top global ranking on TryHackMe
8.2 /10 GPA at CHARUSAT
Pentesting API Security OWASP Kubernetes Docker MITRE ATT&CK BurpSuite Spring Security OAuth2 Pentesting API Security OWASP Kubernetes Docker MITRE ATT&CK BurpSuite Spring Security OAuth2
Featured

Projects

01

Mrigtrix

A cybersecurity reconnaissance tool that captures 7+ system metrics, automates log delivery via Discord webhooks, and integrates phishing simulation with Tailscale tunneling for secure cross-network red team testing.

Python Flask Tailscale Discord Webhooks
View Details
02

Project Management System

A full-stack project collaboration platform with role-based access, JWT-secured REST APIs, real-time chat over WebSocket, SMTP email invitations, and Razorpay-powered subscription payments. Built with Spring Boot 3 and MySQL.

Java 17 Spring Boot 3 Spring Security JWT MySQL JPA WebSocket Razorpay SMTP
View Details
03

Hotel Rating System

A microservices-based hotel rating platform with secure OAuth2/OIDC authentication via Okta, API Gateway with rate limiting, and resilient service-to-service communication using Netflix Eureka and Resilience4j.

Java Spring Boot Spring Security Okta MySQL MongoDB
View Details
Recognition

Achievements

High — CVSS 8.2 CVE-2026-40893

ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names

Discovered a High severity vulnerability in Gotenberg that allows arbitrary file rename and move via ExifTool dangerous tag blocklist bypass using group-prefixed tag names.

gotenberg/gotenberg 12.7k
High — CVSS 7.5 CVE-2026-61549

Privilege Escalation via Unrestricted serviceAccountName in the Kubernetes Backend

Discovered a High severity privilege escalation in Woodpecker CI: an unrestricted `serviceAccountName` in pipeline YAML let any user with push access run Kubernetes pods under an arbitrary — potentially cluster-admin — service account.

woodpecker-ci/woodpecker 7.5k
Low — CVSS 3.1 CVE-2026-23603

Blind SSRF in OAuth2 Avatar Synchronization via Unvalidated OIDC picture Claim

Reported a Low severity blind SSRF in Gitea's OAuth2 avatar sync: an unvalidated OIDC `picture` claim let a low-privileged user coax the server into fetching arbitrary internal URLs.

go-gitea/gitea 57k

Best Research Paper Award

Awarded Best Research Paper by CHARUSAT for the work on Wild Animal Detection using YOLOv8.

Times of India Feature

Research on Wild Animal Detection featured on the front page of the Times of India (Feb 15, 2024).

Top 10% on TryHackMe

Achieved top 10% global ranking on the TryHackMe cybersecurity training platform.

View all achievements & publications

Let's work together.

Have a security challenge, an interesting project, or just want to talk shop?

Get in Touch