VINIT
RAMI
Break it like an attacker. Defend it like an analyst. A year of hands-on VAPT across finance, healthcare and government, now applying that attacker's instinct to detection, response and digital forensics.
About
the analyst
I'm Vinit, a cybersecurity analyst who spent the last year legally breaking into production systems. At 7HillsCyberWall I ran end-to-end VAPT across finance, healthcare and government, surfacing SQL injection, XSS, SSRF and privilege-escalation flaws before real adversaries could.
That offensive grounding now powers my defensive work: detection, incident response and digital forensics. I'm completing an MSc in Cyber Security & Forensic Information Security at the University of Portsmouth, and I compete in international CTFs to keep my triage speed sharp.
Field experience
From client-facing VAPT engagements to research cells and community defence. Every entry sharpened the same skill: finding what others miss.
Cybersecurity Auditor & VAPT Analyst
AUG 2024 · AUG 2025- Ran end-to-end VAPT assessments across finance, healthcare and government, identifying SQL injection, XSS, SSRF and privilege-escalation vulnerabilities in live production systems.
- Produced reports combining CVSS scores, PoC exploits and plain-English remediation; clients closed an average of 40% of critical findings within 60 days.
- Web app testing with Burp Suite Pro & OWASP Top 10 · infrastructure with Nessus & Metasploit · network-layer analysis with Nmap & Wireshark.
- Presented findings to C-suite and engineering teams in the same engagement, then re-tested patched systems for a complete compliance audit trail.
Cybersecurity Researcher & Developer
AUG 2024 · PRESENT- Led research into emerging attack vectors and threat-actor techniques, circulating practical reports to faculty and industry partners.
- Designed awareness workshops reaching 200+ students; co-organised cybercrime-prevention events with local law enforcement.
Cybersecurity Volunteer & Mentor
JUL 2023 · PRESENT- Share threat intelligence, CTF write-ups and security resources in an open practitioner community; mentor newer members on ethical-hacking methodology and OSINT.
Cybersecurity Awareness Intern
JAN 2024 · MAR 2024- Delivered sessions on phishing, cyber fraud and social engineering to school & college students; taught Python and Java to senior-secondary classes.
Research Intern · Machine Learning
AUG 2023- Contributed to a Solar Power Output Prediction project: data preprocessing, Scikit-learn model training and formal research documentation to publication standard.
MSc Cyber Security & Forensic Information Security
B.Tech Cybersecurity & Networking
The arsenal
Tools are only as sharp as the analyst holding them. These are mine, used in real engagements rather than just labs.
Offensive Security
Detection & Response
Digital Forensics
Threat Intel & OSINT
Network & Infrastructure
Automation & Code
Case files
Selected engagements and research, declassified where the NDA allows.
Phishing Attack Analysis & Detection Framework
A detection framework that triages phishing the way analysts actually do: enriching live URLs and samples through PhishTank, OpenPhish, VirusTotal, URLScan.io and MXToolbox, then mining Kaggle phishing datasets for structural attack patterns.
Production VAPT Across Regulated Sectors
A year of end-to-end assessments for finance, healthcare and government clients: SQLi, XSS, SSRF and privilege-escalation findings in live systems, delivered as CVSS-scored reports with PoC exploits, then re-tested to verified closure.
Cybercrime Awareness Programme
Designed and delivered structured sessions on phishing mechanics, social engineering and cyber fraud to 200+ students, co-organised with local law enforcement, with retention measured through live Q&A and follow-up discussion.
Solar Power Output Prediction
Full machine-learning pipeline on monthly solar-energy datasets at the Singapore Institute of Technology: data cleaning, Scikit-learn model training, accuracy evaluation and formal research documentation to publication standards.
IntelPulse: Threat Intelligence & Triage Workbench
A full-stack SOC platform that kills tab fatigue: paste an alert, raw syslog or a JSON export and it parses the indicators, queries AbuseIPDB, OTX, GreyNoise, ThreatFox and URLhaus concurrently, scores them into one auditable verdict, graphs how they relate, and writes the Jira-ready ticket with MITRE ATT&CK mapping and containment steps.
PhishHawk: Automated Phishing IOC & Threat Triage Engine
A terminal tool that runs the first ten minutes of L1 phishing triage by itself. It reads .eml and Outlook .msg files or a whole report mailbox over IMAP, Microsoft Graph or the Gmail API, opens archives (7z included), ISO and VHD disk images and Office, PDF and OneNote files in memory, decodes QR codes, and catches lookalikes of your own domain even when SPF, DKIM and DMARC pass. It groups reports into campaigns, finds the unreported copies in Microsoft 365 and Gmail mailboxes, and keeps each message with a hash-chained custody log. It enriches via VirusTotal, URLScan.io, RDAP and AbuseIPDB, maps verdicts to MITRE ATT&CK, and exports STIX 2.1 and MISP. Tested with no API keys on real mail it had never seen: 81.3% of 5,714 phishing emails from 2022 to 2026 caught, 46.9% of them called likely phishing outright, and 0.8% false positives across 5,945 legitimate emails.
Source on GitHubVerified credentials
Six EC-Council credentials spanning offense, defence and forensics. Proof I don't just talk the trade.
Certified Ethical Hacker v13
Let's secure
something together.
I'm open to cybersecurity roles across the UK: security analysis, SOC, VAPT or DFIR. DBS-verified, immediate start, and I read every message myself. Usually within hours, not days.
