Cyber Security researcher · bug bounty hunter · CTF player Third-year B.E. Computer Science (Cyber Security), KSR College of Engineering — Tamil Nadu, India.
I spend most of my time on live scopes: web and API penetration testing, with a focus on access-control / IDOR and business-logic flaws. I write my own tooling in Python when a target needs something the standard tools don't do. Currently pushing that same methodology toward cloud security and red teaming.
| Platform | Handle | Notes |
|---|---|---|
| TryHackMe | nivx18 | Top 3% — 100+ rooms, 15 badges |
| Bugcrowd | nivxz | Public programs — access control, IDOR, logic bugs |
| Reports accepted | 70+ | Across public and private programs |
Security tooling
| Project | What it does |
|---|---|
| cryptonex | Cryptographic discovery + post-quantum risk assessment and migration planning — CycloneDX CBOM & SARIF output, fully offline. Built for Smart India Hackathon 2026 (PS 26164, NTRO). |
| vuln-database | 190-entry web / API / cloud / LLM vulnerability reference across 16 categories — CWE, detection method, example payload and fix per class, with a zero-dependency query CLI. |
| NetworkAnalyzer | System network config, IPv4/IPv6 subnet math and connectivity checks behind one engine — Tkinter GUI, browser UI and CLI. Pure standard library. |
| port-scanner | Multithreaded TCP port scanner — service identification, banner grabbing, JSON/CSV export, unit tests. |
| campus-wifi-analyzer | Measures latency, jitter, loss and throughput on a campus Wi-Fi link, scores congestion 0–100 and shows why. No third-party packages. |
Web & AI
| Project | What it does |
|---|---|
| trueloop · vicodathon | AI technical-interview tools that ground each question in the candidate's real learning history and verify resume claims conversationally. Next.js + Claude / Gemini. |
| CitySnap | Full-stack civic-issue reporting — AI image captioning, geolocation, admin monitoring. React + Node + MongoDB. |
| portfolio | Scroll-driven WebGL flight through a 3D scene, headline type rendered as real geometry. Vanilla JS + Three.js + GSAP. |
Testing Burp Suite · Nmap · Nuclei · SQLMap · ffuf · Nikto · Metasploit · Wireshark Code Python · JavaScript / TypeScript · Bash · SQL Environment Linux · Git · Next.js · Flask
- Email — hackcaps.labz@gmail.com
- Portfolio — github.com/nivas1899/portfolio
Still learning, still reporting real bugs while I do.