Skip to content
View Akshayy-y's full-sized avatar
💭
root@mind:~# exploit knowledge
💭
root@mind:~# exploit knowledge

Block or report Akshayy-y

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Akshayy-y/README.md

Header

Aspiring Penetration Tester | Red Teaming | Web & Network Security | Ethical Hacking


🔍 Featured Projects Active-Directory-Attack-Lab

A simulated enterprise AD environment built to attack, covering Kerberoasting, AS-REP Roasting, Pass-the-Hash, ACL abuse, and DCSync/Golden Ticket — the full modern AD attack chain from initial foothold to domain compromise. Active Directory Kerberos Windows Server Mimikatz

RedTeam-Lab-Writeups

14+ writeups from authorized training labs and CTFs, each walked end to end: enumeration, exploitation, and root cause. Covers web application security, command injection, insecure deserialization, SSTI, XXE, privilege escalation, and steganography. CTF Web Exploitation Privilege Escalation

Wazuh-SOC-Lab

Built an isolated Wazuh SIEM lab and attacked it myself — Nmap recon, SSH brute force, EICAR malware, cron persistence — to see exactly what gets detected and what slips through. Knowing how detection works makes for better attacks. Wazuh MITRE ATT&CK Detection Evasion

Splunk-SIEM-Home-Lab

A Splunk-based SOC lab validating SSH brute-force detection end to end — log forwarding, indexing, and alerting. Built to understand the blue-team side of the attacks I run. Splunk SIEM Log Analysis

PhishGuard

A full-stack Django app that detects phishing emails in real time with a trained ML model, auto-blocks malicious senders, and runs sentiment analysis on every message. Python Django scikit-learn

🛠️ Skills & Tools

Offensive Security: Penetration Testing · Active Directory Attacks (Kerberoasting, Pass-the-Hash, DCSync) · Network Pentesting · Web Application Security (OWASP Top 10) · Reconnaissance Tools: Kali Linux · Nmap · Burp Suite · Metasploit · Hydra · SQLmap · Mimikatz/Rubeus Blue-Team Awareness: Wazuh · Splunk · MITRE ATT&CK · Log Analysis Programming & Scripting: Python · Bash · PHP · JavaScript Systems & Networking: Linux · Windows Server / AD · TCP/IP · DNS · HTTP/HTTPS · Git

🌐 Connect with me


💻 Development Skills

Pinned Loading

  1. RedTeam-Lab-Writeups RedTeam-Lab-Writeups Public

    Hands-on penetration testing and CTF writeups from authorized Red Team and cybersecurity training labs.

  2. Active-Directory-Attack-Lab Active-Directory-Attack-Lab Public

    Hands-on Active Directory lab covering attacks, privilege escalation, lateral movement, and detection.

  3. Wazuh-SOC-Lab Wazuh-SOC-Lab Public

    A fully isolated Wazuh SIEM lab (VirtualBox) simulating and detecting 4 real attack techniques — Nmap recon, SSH brute force, EICAR malware + VirusTotal, and cron persistence — with full MITRE ATT&…

  4. Python-Port-Scanner Python-Port-Scanner Public

    A multi-threaded port scanner written in Python.

    Python

  5. phishguard phishguard Public

    PhishGuard phishing detection system

    JavaScript 2

  6. Portfolio Portfolio Public

    Portfolio

    HTML 1