Hi there

I'm SinghCyber, a Security Researcher and aspiring Cybersecurity Specialist. I focus on realistic, goal-driven penetration tests across web applications, APIs, infrastructure, Active Directory environments and more.

I combine automation with manual tradecraft to find complex issues, validate real risk, and help teams harden their environments instead of chasing noise.

View Labs & Projects See methodologies Contact

Present Status 🧭

🎯

Offensive Security

Deeper tradecraft, adversary simulation

✍️

Writing

Blogs, playbooks & test plans

📱

Kubernetes (K8s)

Cloud-native & container attack paths

---

🔍 Focus: Realistic red-team style assessments 🌐 Web & API | 🖥 AD | ☁ Cloud 📚 Strong methodology, clear reporting

Projects 🚀

I build and maintain realistic labs to practice full kill-chains, not just single vulnerabilities.

Security Standards & Frameworks 🛡️

Engagements are mapped to well-known industry standards so findings connect directly to risk and controls.

Skills 🧠

Coverage from external surface to internal lateral movement, plus cloud and mobile.

Knowledge ⚙️

Tooling changes, but the goal is the same: understand how a real attacker would pivot and persist, then help you close the gaps.

Show full offensive tooling stack (Burp, AD tools, cloud, mobile, privesc & more)

Certifications 🎓

GitHub Stats 👨‍💻

Support ⚡️

If you like the labs, write-ups, or tooling I share, you can support future builds here:

🌱 Constantly learning. Constantly breaking. Constantly improving.