Web & API
Application behaviour, authentication, and trust boundaries.
Arman Mishra Penetration Tester
Hey, I’m Enkidu.
The wild man learnt to enumerate.
I research how web applications, networks, and Active Directory environments fail, and build tools to make that work easier to verify.
Expertise
Where I work
Network
Service discovery, fingerprinting, and evidence-led triage.
Active Directory
Windows environments, identity, and authentication.
Methodology
Enumeration first.
Every finding starts as a hypothesis. I trace it back to the evidence, validate the impact, and document what the results support.
Methodology notes
- enumerate
- Map what’s exposed and record the context.
- validate
- Test the hypothesis against observable evidence.
- document
- Explain what the evidence establishes and how to address it.
Selected projects
Tools and lab work
Shredder
A Python-based reconnaissance and service-enumeration tool combining fast port discovery, Nmap fingerprinting, script-based enumeration, and evidence-led triage.
Ink
A lightweight SQLite-backed credential notebook for organizing discovered identities, credentials, authentication validation, and credential-reuse observations during assessments.
Active Directory Attack Lab
A custom three-machine Active Directory environment with four domain users and multiple demonstrated routes to domain compromise.
Achievements
Beyond the lab
CTF competition wins, independent vulnerability disclosures, and challenge development for HackVerse.
Achievements and recognitionAbout
Arman Mishra
I’m studying cybersecurity, building my own lab environments, and working toward a career in security research.
More about me