Offensive Security
Exploit Developer

Penetration tester and solo CTF player specialising in exploit development, reverse engineering, Linux kernel exploitation and LLM pentesting, plus Web, API, Network and Cloud security.

01

Writeups

603+ technical writeups on CTFs, HackTheBox machines, exploit development and web bugs, fully searchable with screenshots.

Writeups page screenshot
02

Achievements

CTF wins, top HackTheBox India ranking, Top 1% on TryHackMe and multiple bug bounty rewards.

Achievements page on a phone
03

CVEs & Disclosures

Vendor-patched vulnerabilities and published GitHub security advisories, each with a full breakdown and timeline.

CVEs page screenshot
04

Open-source Tools

Offensive tooling for recon, parameter discovery, XSS hunting and secret scanning, with live GitHub stats.

Projects page screenshot

2x

CTF winner — incl. Oscillation CTF 2026

Top 2

HackTheBox India · #20 worldwide

Top 1%

TryHackMe global ranking

603+

Technical writeups published

7x

Bug bounty rewards

8.3k+

Followers on LinkedIn

Core Skills

Expertise across offensive security domains — everything else lives in its own section up in the nav bar.

Exploit Development

Memory corruption, ROP chains, format strings and Linux kernel exploitation from crash triage to a working exploit.

Reverse Engineering

Static and dynamic analysis of binaries with GDB, Ghidra and IDA to recover logic, patch checks and find bug classes.

Bug Bounty Hunter

Discovering and responsibly disclosing vulnerabilities across web applications and APIs on major platforms.

Penetration Tester

Full-scope security assessments across web, network and Active Directory environments, with actionable reporting.

Web & API Security

Deep web application attack coverage, API exploitation, authentication flaws and secure development practices.

Network & Cloud Security

Network penetration testing, AWS cloud security assessments and infrastructure hardening.

Education

B.Sc. Information Technology

4th semester · CGPA 7.1

Currently in the 4th semester with a 7.1 CGPA, running offensive security research, CTFs and bug bounty work alongside coursework.

Explore

Pick a category from the glass bar above, or jump straight in from here.

Let's Collaborate

Interested in collaborating on security research, exploit development, bug bounty programs or penetration testing engagements? Reach out and let's talk.

[email protected]

Mumbai, Maharashtra · India

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi