Track record

Achievements

Competition wins, platform rankings, disclosure milestones and community reach.

1st

2026

Competition

Oscillation CTF 2026 — Winner

Two-time CTF winner, competing solo against full teams.

1st

2025

Competition

Air University Cyber Sprint — 1st Place

Top of the scoreboard in an international jeopardy-style competition.

#20

Global

Ranking

HackTheBox — Top 2 in India

Ranked #20 worldwide on the HackTheBox global leaderboard.

Top 1%

Ranking

TryHackMe — Top 1% globally

Sustained top-percentile ranking across offensive learning paths.

7x

Disclosure

Bug Bounty Rewards

Rewarded findings on public programs, including a same-day reflected XSS triage.

5

Disclosure

Vulnerabilities Patched

Vendor-confirmed fixes shipped after coordinated disclosure.

28

Disclosure

Findings — Education & Gov

12 critical, 7 high and 11 low/medium issues reported to portal owners.

8.3k+

Community

LinkedIn Following

Security community audience built through research and writeups.

5 tools

Research

Open-Source Tooling

ParameterX, XSSion, urlx, tr01d and rapzy used by bug bounty hunters.

100+

Research

Technical Writeups

Published across HTB, picoCTF, exploit development, AD, AWS and LLM pentesting.

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi