Discover
Map the attack surface and identify what is actually exposed.
PENETRATION TESTER / SECURITY RESEARCHER
Arman MishraThe wild man learnt to enumerate.
I’m Arman, known as Enkidu. I work across web, network, Windows, Linux, and Active Directory security. My approach is grounded in careful enumeration, evidence-led validation, and practical security research.
09 CTF victories Reported achievement count
05 National CTFs National competitions
02 Paid bounty awards Independent disclosures
5–6 Reported findings Approximate total
01 / THE APPROACH
Curiosity, followed by evidence.
Good security testing starts with understanding the environment. Enumeration comes first; assumptions do not count as findings.
Enumerate
Collect context, relationships, configurations, and useful evidence.
Validate
Test hypotheses and distinguish a possible weakness from a demonstrated issue.
Document
Explain the evidence, impact, reproduction, and practical remediation.
02 / SELECTED WORK
Built, tested, documented.
Security tooling and environments developed through practical work and independent experimentation.
Reconnaissance tooling
Shredder
A Python-based reconnaissance and service-enumeration tool combining fast port discovery, Nmap fingerprinting, script-based enumeration, and evidence-led triage.
Operator workflow
Ink
A lightweight SQLite-backed credential notebook for organizing discovered identities, credentials, authentication validation, and credential-reuse observations during assessments.
Lab engineering
Active Directory Attack Lab
A custom three-machine Active Directory environment with four domain users and multiple demonstrated routes to domain compromise.
03 / CREDENTIALS
Validated learning.
Professional certifications backed by practical security training and hands-on assessment work.
CPTS
Hack The Box
HTB Certified Penetration Testing Specialist
Verify credential ↗PJPT
TCM Security
Practical Junior Penetration Tester
Verify credential ↗04 / FIELD EXPERIENCE
Beyond the laboratory.
Independent vulnerability disclosures, paid bounty findings, CTF challenge development, and a custom Active Directory attack lab.
Contributed forensic challenges and boot-to-root machines to the HackVerse CTF platform through Script Jackers, with recognition from Ginius Cyber Security Council.
Explore achievements ↗