OSCP+ certified. CTF Player. Former Intel hardware Security and Engineer. Pentester and Offensive tooling developer.
c2ne is a is a covert command-and-control framework POC written in Go, that hides operator commands inside a live audio stream, making C2 traffic indistinguishable from a user streaming music in Chrome.
Commands are encrypted with AES-GCM, then encoded bit-by-bit into LSB of audio bytes. The implant decodes and decrypts incoming chunks continuously, reconstructing commands and executing them. Command output is sent through two exfiltration channels, based on length. Short into scrobble POST, longer into a file upload, encoded using the same logic in reverse.
The traffic layer is engineered to survive DPI inspection. uTLS HelloChrome_Auto is used to produce an accurate Chrome TLS fingerprint. HTTP/1.1 headers are handcrafted to mirror Chrome's exact fields. GET request cadence is jittered proportionally to chunk size, mimicking a media player refilling its buffer.
Pre-C2 egress diagnostic tool built in Go. Concurrent multi-protocol egress testing against pfSense ACL rules and Suricata DPI — surfaces which port/protocol combinations survive firewall inspection before structuring fallback on C2 implant, with custom jitter and timout features.
OSCP+ Certified. M.Tech in CS & Information Security from Manipal Institute of Technology. Spent 4 years at Intel Corporation — first refactoring AES and SHA cryptographic engines in C for the SDM Security Team. Then building SKILL-based automation frameworks for chip validation across multiple process nodes and bash and python automation scripts for efficiencies. Pivoted into offensive security with a focus on Active Directory attack chains, Kerberos abuse (PTH, PTT, OPtH), and multi-hop network pivoting. 125+ machine run-throughs across PG, HTB, Hacksmarter documented on GitHub. Hardware background gives an unusual lens on cryptographic implementation vulnerabilities most pentesters don't think about. Two offensive tools built from scratch. A Steganographic audio C2 and an Egress protocol discovery framework for C2 fallback structuring.