Skip to content
View nivas1899's full-sized avatar
💭
push the limits to the limit 💸🖤
💭
push the limits to the limit 💸🖤

Block or report nivas1899

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nivas1899/README.md

Nivas Babu

Cyber Security researcher · bug bounty hunter · CTF player Third-year B.E. Computer Science (Cyber Security), KSR College of Engineering — Tamil Nadu, India.

I spend most of my time on live scopes: web and API penetration testing, with a focus on access-control / IDOR and business-logic flaws. I write my own tooling in Python when a target needs something the standard tools don't do. Currently pushing that same methodology toward cloud security and red teaming.


Where to find my security work

Platform Handle Notes
TryHackMe nivx18 Top 3% — 100+ rooms, 15 badges
Bugcrowd nivxz Public programs — access control, IDOR, logic bugs
Reports accepted 70+ Across public and private programs

Selected projects

Security tooling

Project What it does
cryptonex Cryptographic discovery + post-quantum risk assessment and migration planning — CycloneDX CBOM & SARIF output, fully offline. Built for Smart India Hackathon 2026 (PS 26164, NTRO).
vuln-database 190-entry web / API / cloud / LLM vulnerability reference across 16 categories — CWE, detection method, example payload and fix per class, with a zero-dependency query CLI.
NetworkAnalyzer System network config, IPv4/IPv6 subnet math and connectivity checks behind one engine — Tkinter GUI, browser UI and CLI. Pure standard library.
port-scanner Multithreaded TCP port scanner — service identification, banner grabbing, JSON/CSV export, unit tests.
campus-wifi-analyzer Measures latency, jitter, loss and throughput on a campus Wi-Fi link, scores congestion 0–100 and shows why. No third-party packages.

Web & AI

Project What it does
trueloop · vicodathon AI technical-interview tools that ground each question in the candidate's real learning history and verify resume claims conversationally. Next.js + Claude / Gemini.
CitySnap Full-stack civic-issue reporting — AI image captioning, geolocation, admin monitoring. React + Node + MongoDB.
portfolio Scroll-driven WebGL flight through a 3D scene, headline type rendered as real geometry. Vanilla JS + Three.js + GSAP.

Toolbox

Testing   Burp Suite · Nmap · Nuclei · SQLMap · ffuf · Nikto · Metasploit · Wireshark Code   Python · JavaScript / TypeScript · Bash · SQL Environment   Linux · Git · Next.js · Flask


GitHub

stats streak

top languages

contribution snake


Contact

Still learning, still reporting real bugs while I do.

Pinned Loading

  1. hackcaps_framework_v1 hackcaps_framework_v1 Public

    Forked from R-s0n/ars0n-framework-v2

    Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros

    JavaScript

  2. image_enchancer image_enchancer Public

    Image upscaling, denoising and enhancement using Pillow resampling + filters (no ML model). Flask web UI, Tkinter desktop app, and CLI.

    Python

  3. stacksecure-ai stacksecure-ai Public

    Cybersecurity dashboard concept — global threat feed, tech-stack vulnerability analyzer, and a CVE registry with remediation notes. Next.js 15 + React 19.

    TypeScript