Skip to content
View KshitizSadh's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report KshitizSadh

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
KshitizSadh/README.md

Kshitiz Sadh

Cybersecurity | VAPT & SOC Analysis | Security Automation

LinkedIn Profile Views


About

Final-year BSc (Hons) Computer Science student at Ramanujan College, University of Delhi, focused on offensive and defensive security. CRTA-certified, ranked in the top 3% on TryHackMe, and experienced in building and operating CTF infrastructure end-to-end — from challenge design to platform deployment.

Currently pursuing entry-level roles across two tracks:

  • VAPT / Penetration Testing — web and network security assessments, exploit development, CTF challenge design
  • SOC / Blue Team — SIEM operations, detection engineering, incident triage

Featured Work

AI Security Alert Triage Assistant Local SOC pipeline built on Wazuh + Ollama (Llama 3.1 8B, DeepSeek-R1) that ingests security alerts, applies MITRE ATT&CK mapping, and generates LLM-assisted triage summaries — fully self-hosted, no external API dependency. Delivered as a 12-day build-in-public challenge.

Wazuh SIEM Home Lab Multi-host detection lab (Windows 11 agent → Ubuntu Server 22.04 manager) with tuned File Integrity Monitoring rules, including real-time detection validated against hosts file tampering (Rule 550).

vulnsplain Static analysis triage tool combining Bandit (SAST) with LLM-based explanation and CWE mapping, built to make SAST findings more actionable for developers.

Shadow Network / Razzify — CTF Platform Contributed to platform development and authored original challenges across cryptography, web exploitation (SSTI, JWT bypass), binary exploitation, and forensics categories, including writeups and infrastructure fixes.

URL Attack Detector Machine learning–based phishing URL classifier (Python, scikit-learn, Flask) delivered as an offline-capable PWA, extracting 18+ features for classification, ~98.7% accuracy on held-out data. Repository →


Technical Skills

Security Tools: Kali Linux · Burp Suite · Metasploit · Wireshark · Wazuh · Shuffle · TheHive Languages: Python · C/C++ · JavaScript Web / Frameworks: React · Tailwind CSS · Flask Platforms: Linux (Pop!_OS) · Git


Certifications & Rankings

  • CRTA — Certified Red Team Analyst
  • TryHackMe — Top 3% global ranking

GitHub Activity

GitHub Stats Top Languages

Contact

LinkedIn — open to VAPT and SOC/blue team opportunities in Delhi NCR.

Pinned Loading

  1. Cloud-labs Cloud-labs Public

    A Repository to showcase my experiments with cloud IAAS , include SIEM ,EDR,SOAR and Other related experiments.

    1

  2. ai-security-triage ai-security-triage Public

    The AI Security Alert Triage Assistant is a Python-based tool that bridges the gap between raw SIEM alerts and actionable security intelligence. It connects to a Wazuh SIEM deployment, retrieves se…

    Python

  3. CTF-Writeups CTF-Writeups Public

    CTF challenge solutions and security research documentation with detailed methodologies

    Python

  4. nextwork-web-project nextwork-web-project Public

    Java web app set up on an EC2 instance.

    Java

  5. vulnsplain vulnsplain Public

    A CLI tool that combines real SAST analysis (Bandit) with LLM-powered triage to explain Python security vulnerabilities in plain English — with severity context, CWE mapping, and actionable remedia…

    Python

  6. wazuh-siem-project wazuh-siem-project Public

    A complete hands-on SIEM deployment project covering Wazuh installation, agent management, log collection, and dashboard navigation — built for students, SOC analysts, and cybersecurity portfolios.

    Shell