Systems Security · Production Infrastructure · Competitive Programming

CS undergrad at IIT Mandi. I build production systems, break into things (legally), and grind competitive programming. Most at home somewhere between a packet capture and a segfault.

Leading SAIC (System Administration & InfoSec Cell) under KamandPrompt — IIT Mandi's programming club. Software Engineer on Sootrank, the institute's academic ERP serving 3,000+ users and all faculty.

PyC2-DNS — A DNS-based Command & Control framework, built from scratch. C++ agent with AES-128-CTR encryption, cross-platform persistence (systemd / Registry / LaunchAgent), jitter-based evasion, and DNS tunneling through recursive resolvers. Python operator console with multi-agent management. Deployed over real DNS infrastructure via c2.softkernel.in.

Sootrank — IIT Mandi's production academic ERP (Django). Led security hardening — CVE remediation, LDAP-only auth migration (deleted 11,700+ lines), hash-chained audit logging, CI/CD pipeline, Docker deployment, and AWS S3 backup integration. Discovered a cryptominer planted in the codebase and ran incident response.

PsychCTF 2026 — Organized IIT Mandi's flagship CTF. 945 teams, 1,287 participants, CTFtime weight 24.51/25, ₹25,000 prize pool. Built the infrastructure, challenge deployment pipeline, and scoring backend.

WedTech — Full-stack wedding CRM. Django + Express backend, React frontend, WhatsApp Cloud API, Twilio, AI-powered voice calls. 40+ Prisma models, 183 REST endpoints.

Post-Quantum DTLS 1.3 — Implementation on bare-metal RISC-V (520KB ROM, 13KB RAM). Inter IIT Tech Meet 14.0.

Languages: C++ · Python · JavaScript / TypeScript · C · Bash · SQL
Backend: Django · Express · Flask · Node.js
Frontend: React · Astro · Bootstrap
Infrastructure: Docker · Nginx · Linux · DigitalOcean · AWS · Cloudflare
Security: Wireshark · Burp Suite · Ghidra · Nmap · dnscat2 · CTF tooling
Databases: PostgreSQL · MongoDB · SQLite