Open to relevant security opportunities

Offensive security · New Delhi, India

I test systems.
I think in attack paths.

I’m Abhay Gupta, an OSCP and OSCP+ certified penetration tester focused on web applications, networks, and Active Directory. I build security tools, work through attack paths, and document the results.

Explore my work Download résumé (PDF) ↓ Hack The Box profile ↗GitHub profile ↗

Interested in Penetration Testing · VAPT · Application Security · Offensive Security

abhaygupta.sec
abhay@security:~$ whoami
Abhay Gupta
focus = web · network · AD
certification = OSCP / OSCP+
approach = enumerate → validate → document
status = open to security roles
Web application security
Network and Active Directory testing
Authorized environments only
#796HTB global ranking
82HTB level · Prodigy
108HTB machines completed
#535Season 12 tier rank

01 / Selected work

Projects and writeups.

Tools, notes, and lab work covering reconnaissance, Active Directory, web testing, and reporting.

01
PYTHON TOOLING

NmapTool — Automated Recon

Python tool for TCP/UDP discovery, service enumeration, Nmap NSE scans, and HTML, JSON, XML, and raw output.

PythonNmapXML / JSONReporting
View repository ↗
02
METHODOLOGY

Offensive Security Methodology

My notes for reconnaissance, web testing, Active Directory, privilege escalation, pivoting, and reporting.

MethodologyActive DirectoryReporting
View repository ↗
03
LAB RESEARCH

Hack The Box Writeups

Technical notes from Linux and Windows lab machines, documenting enumeration, attack chains, validation steps, and lessons learned.

104 machines46 writeupsLinux / Windows
Browse writeups ↗

View my HTB profile ↗

All lab work is completed in authorized environments.

02 / Practice

Hands-on security labs.

I work through enumeration, exploitation, privilege escalation, and reporting in authorized environments.

Lab experience

Hack The Box

HTB level 82 (Prodigy), 108 completed machines, and 6 of 18 flags in the active view. My GitHub repository contains 46 technical writeups.

  • ↗ Manual enumeration and service discovery
  • ↗ Exploitation and privilege escalation in labs
  • ↗ Commands, findings, and technical notes

Read the writeups on GitHub ↗

Approach

From discovery to reporting

Every assessment starts with scope and ends with findings, impact, and remediation.

  • 01 Define scope and confirm authorization
  • 02 Reconnaissance and manual enumeration
  • 03 Validate findings and document evidence
  • 04 Explain impact and recommend fixes

03 / Testing approach

Choose a focus area.

Explore my approach to web application, Active Directory, and network testing.

FOCUS AREA / web

    04 / Hack The Box

    HTB profile and work.

    See my public profile, writeups, and security projects.

    Platform profile

    Hack The Box · Abhay Gupta

    My public HTB profile includes platform progress, badges, and activity.

    • ↗ Current public profile and activity
    • ↗ Badges and achievements
    • ↗ Skills and training history

    Open my HTB profile ↗

    Independent technical work

    Writeups and tools

    My GitHub contains writeups, Python tooling, and notes from my security labs.

    • 01 HTB machine writeups
    • 02 Automated reconnaissance tooling
    • 03 Reusable offensive security methodology

    Explore GitHub projects ↗

    05 / Hack The Box stats

    HTB progress.

    Ranks and activity change over time. Visit my profile for the latest numbers.

    #
    GLOBAL RANKING

    Global rank #796

    Global ranking: #796, with a 3.16% increase at the time of capture.

    #796 global+3.16%
    View HTB profile ↗
    LVL
    PROFILE

    Level 82 · Prodigy

    HTB profile level shown with the Prodigy rank. The profile screenshot also displays a grade of two filled diamonds and one outlined diamond.

    Level 82Prodigy
    View live HTB profile ↗
    LAB
    MACHINES

    108 machines completed

    108 of 555 HTB machines completed across Linux and Windows environments.

    108 / 555 machinesAuthorized labs
    S11
    SEASON 11

    Platinum tier

    Rank #1138, 685 points, 11 user solves, and 11 system solves.

    Rank #1138685 points11 + 11 solves
    S12
    CURRENT SEASON

    Silver tier · #535

    Season 12 rank #535, 175 points, and 60% tier progress.

    175 points60% tier progress
    FLAG
    ACTIVE VIEW

    6 of 18 flags

    6 of 18 flags in the active view, alongside 108 completed machines.

    6 / 18 flags108 / 555 machines

    Profile interests and toolstack

    What I'm focusing on

    Web ApplicationVulnerability AssessmentPrivilege AbuseNetwork MisconfigurationVulnerability ScanningActive Directory Trust AbuseNmapevil-winrmImpacketBloodHound PythonNetExecPythonPHP

    Skills and tools shown on my HTB profile.

    06 / Certifications

    OffSec certifications.

    Official credential verification is available below.

    Verified through OffSec.

    07 / Technical skills

    Tools and focus areas.

    Security tools and techniques I use in labs and projects.

    Web application security

    SQL Injection · XSS · LFI · Command Injection · Authentication Testing · HTTP Testing · Burp Suite · FFUF

    Active Directory

    LDAP · SMB · Kerberos · BloodHound · ACL Abuse · AD CS · RBCD · Kerberoasting · AS-REP Roasting

    Network security

    Nmap · TCP/UDP Scanning · Service Enumeration · NSE · Network Discovery · Pivoting

    Penetration testing

    Reconnaissance · Enumeration · Exploitation · Vulnerability Assessment · Privilege Escalation · Post-Exploitation · Reporting

    Tools & scripting

    Python · Bash · PowerShell · Impacket · Evil-WinRM · Hashcat · John the Ripper

    Environments

    Kali Linux · Linux · Windows · Windows Server

    08 / Background

    About me.

    Profile

    Abhay Gupta

    Penetration tester focused on web applications, networks, and Active Directory. I enjoy building security tools and working through hands-on labs.

    Based in New Delhi, India. Target roles include Penetration Tester, VAPT, Application Security, and Offensive Security.

    Education

    Bachelor of Computer Applications (BCA)

    Delhi Skill and Entrepreneurship University, New Delhi

    School of Excellence

    2021–2024

    09 / Contact

    Get in touch.

    Open to penetration testing, VAPT, application security, and offensive security opportunities.

    Download résumé (PDF) ↓ Email me ↗ LinkedIn ↗ GitHub ↗