Credentials

Licenses & certifications

The complete list as it appears on LinkedIn — hands-on, exam-based credentials rather than multiple-choice badges, with issue dates, credential IDs and a direct link to each credential so anything here can be checked independently.

CyberWarFare Labs logo

AD-RTS — Certified AD Red Team Specialist

CyberWarFare Labs · Issued Jul 2026

Advanced Active Directory red team specialisation: forest-wide attack paths, delegation abuse, certificate services (ADCS) exploitation and stealthy persistence in fully patched domains.

AI Fluency: Framework & Foundations

Anthropic · Issued Mar 2026

Structured framework for working effectively and safely with large language models — delegation, description, discernment and diligence applied to real workflows.

u9iyuxmu73dm

loveatfirstbreach Certificate

TryHackMe · Issued Feb 2026 · Expires Mar 2029

Offensive challenge event covering initial access, web exploitation and privilege escalation against a live target network.

THM-3V43YPRM0G

Pre Security Certificate

TryHackMe · Issued Feb 2026 · Expires Feb 2029

Networking, Linux, Windows and web fundamentals — the groundwork every offensive engagement is built on.

THM-X0B8RF2EEE

Advent of Cyber '25 Certificate

TryHackMe · Issued Dec 2025

24-day offensive and defensive challenge series spanning web attacks, forensics, malware analysis, cloud and AI security.

The SecOps Group logo

CNSP — Certified Network Security Practitioner

The SecOps Group · Issued Nov 2025

Network security exam covering TCP/IP attack surface, network service exploitation, Active Directory basics, firewall and IDS evasion, and hardening.

Rizvi College of Education, Bandra (W), Mumbai logo

Project Expo 2k25 — Participant

Rizvi College of Education, Bandra (W), Mumbai · Issued Nov 2025

Field project exhibited at the college expo: a fully functional website plus presentation and formal project report.

  • Built and shipped a fully functional website as the field project deliverable
  • Presented objectives, methodology and results to faculty
  • Authored a structured, comprehensive project report
  • Led execution across web development, documentation and teamwork
  • Delivered every deliverable inside the given deadlines
INE Security logo

eJPT — Junior Penetration Tester

INE Security · Issued Oct 2025 · Expires Oct 2028

Fully hands-on black-box exam: assessment methodology, host and network enumeration, web attacks, pivoting and privilege escalation inside a live lab range.

  • Executed a full black-box penetration test against a live corporate network simulation
  • Demonstrated mastery of Nmap, Metasploit, Hydra and the wider toolchain
  • Applied the complete pentest lifecycle from engagement to final reporting

161978809

CyberWarFare Labs logo

CRTA — Certified Red Team Analyst

CyberWarFare Labs · Issued Sep 2025

Red team methodology mapped to MITRE ATT&CK, executed end to end against a patched enterprise environment.

  • MITRE ATT&CK red team TTPs and weakest-link identification
  • Extensive internal and external enterprise recon
  • Kerberos attacks against a fully patched Active Directory
  • Bypassing segregated networks on updated Linux and Windows
  • Stealth pivoting and lateral movement in multi-OS estates

68d5dacce01c42ea0885931d

Cybersecurity Job Simulation

Mastercard · Issued Sep 2025

Security awareness programme design and phishing-campaign analysis as part of Mastercard's security team simulation.

uvSbY7BqpSPrdf7gN

Cyber Job Simulation

Deloitte Australia · Issued Sep 2025

Web log analysis and incident interpretation for a client breach scenario, with findings communicated to non-technical stakeholders.

R7dtWAoBtni64rN8t

Tata Consultancy Services logo

Cybersecurity Analyst Job Simulation

Tata Consultancy Services · Issued Aug 2025

Identity and access management strategy work: IAM fundamentals, requirement gathering and control recommendations.

YZHEiEcSPcXSucsZj

InternCertify logo

Cyber Security Internship Certificate

InternCertify · Jun – Nov 2025

Five-month cyber security internship with a QR-verifiable credential covering vulnerability assessment and reporting workflows.

interncertify-verified-certificate-6556

Rankings & competition results

Top 1% Global Ranking

TryHackMe · 2025 — present

250+ rooms completed and a top 1% global standing, plus an authored community room, 'Forensicks', covering steganography, crypto and reverse engineering.

Top 2 India · #20 Worldwide

HackTheBox · 2026

Seasonal leaderboard placement earned on live machines and Pro Labs — pure exploitation, no guided hints.

KJ Somaiya logo

Oscillation CTF 2026 — Winner

KJ Somaiya · 2026

First place as a solo competitor across pwn, reversing, web and crypto categories; second CTF title overall.

Education

B.Sc. Information Technology

4th semester · CGPA 7.1

Currently in the 4th semester with a 7.1 CGPA, running offensive security research, CTFs and bug bounty work alongside coursework.

Currently studying

Working towards OSCP/CPTS-level Active Directory tradecraft and deeper Linux kernel exploitation (heap grooming, kASLR bypasses, io_uring and eBPF attack surface), alongside ongoing LLM red teaming research. New credentials are added here and to LinkedIn as soon as they are awarded.

Alham Rizvi

Offensive security researcher and penetration tester based in Mumbai. I break software for a living — memory corruption, kernel bugs, broken authorisation and prompt-level attacks against LLM systems — then write up exactly how it was done so defenders can reproduce it. 603+ technical writeups, six open-source tooling projects and a growing list of vendor-patched disclosures.

Focus areas

  • Exploit development & ROP
  • Linux kernel exploitation
  • Reverse engineering
  • Web & API penetration testing
  • Active Directory attack paths
  • LLM / AI red teaming
  • AWS cloud security review

Work with me

Available for penetration testing engagements, exploit research, secure code review and AI red teaming. Responsible disclosure reports are always welcome.

Mumbai, Maharashtra · India

All research published here is conducted legally, in authorised labs or under coordinated disclosure.

© 2026 Alham Rizvi