Mihraj Mashhoor K
Cybersecurity student (B.Tech Computer Science & Cyber Security, MES College of Engineering) specializing in offensive security methodology, practical penetration testing, Active Directory attack concepts, Linux systems, network defense, security automation, and local AI agent workflows.
ID: Mihraj Mashhoor K
Role: Cybersecurity Student & Security Researcher
Degree: B.Tech Computer Science & Cybersecurity (CGPA 7.9)
Specialization: Offensive Security, Linux & Local AI
Cybersecurity Student & Security Researcher
I approach information security from the dual perspective of fundamental computer systems engineering and structured adversarial methodology. Rather than relying on superficial scanning, my focus centers on the low-level behavior of software, operating systems, and network communication protocols.
As a dedicated cybersecurity student and aspiring penetration tester, my competency is built through completing over 140 TryHackMe challenge rooms, structured educational tracks, practical engineering projects, and a local Kali Linux/AI environment. All practical research is strictly conducted in authorized educational labs and personal test beds.
"Building practical offensive workflows, documenting knowledge rigorously, and mastering security concepts through deliberate repetition and challenge targets in authorized educational environments."
Every educational room solved and vulnerability tested provides an architectural lesson. Competency is developed through disciplined lab practice, systematic enumeration, reproducible documentation, and hands-on tooling.
Demonstrated Credibility & Verified Milestones
Documented competencies backed by TryHackMe platform standing, industry certifications, and structured learning tracks.
140+ hands-on challenge rooms solved across Linux privilege escalation, network exploitation, Active Directory, web security, and network protocol dissection.
Comprehensive foundation covering Linux CLI, network security, packet filtering, SIEM log analysis, intrusion detection, incident response, and Python automation.
Featured Engineering & AI Security Projects
Active engineering systems at the intersection of offensive security, local AI inference, agentic orchestration, and security automation. Real architectures currently in development with complete case studies.
SentinelAI
AI-Powered Vulnerability Intelligence & Security Knowledge PlatformAn actively developed security engineering platform rather than a simple chatbot, SentinelAI unifies vulnerability intelligence, graph-based security knowledge, CVE exposure tracking, asset-software relationships, evidence management, and threat intelligence. Incorporates RAG architectures, CLI/API interfaces, and authorization/approval primitives for secure multi-step orchestration.
Security Knowledge Graph & MITRE ATT&CK Mapping across tactic vectors.
Vulnerability & CVE intelligence engine with contextual exposure analysis.
Structured evidence management linked with actionable defensive remediations.
RAG pipeline, CLI/API dispatch, and audit-logged orchestration primitives.
Autonomous Pentesting Agent
An AI-assisted penetration-testing framework engineered specifically for authorized, scoped assessments on owned targets. Orchestrates specialized local agents across reconnaissance, enumeration, web application analysis, vulnerability verification, evidence collection, and automated report synthesis without external telemetry.
CyberAI
An ongoing local-inference cybersecurity environment focused on private, on-device intelligence. Integrates Ollama, Qwen3-Coder 30B, and OpenCode with Kali Linux security tooling to orchestrate multi-agent development workflows, automated vulnerability analysis tasks, and reproducible security experimentation.
OpenCode Persistent Memory
A portable persistent-memory system for OpenCode with automatic memory extraction, SQLite-authoritative storage, and resilient semantic/keyword retrieval. Features background task extraction, project scoping, and zero cloud dependency.
Ethical Hacker Command Handbook
A structured 15-module documentation architecture covering command syntax, operational flags, realistic use cases, and safety warnings across Linux, Nmap, Metasploit, Burp Suite, Wireshark, and privilege escalation vectors.
AI Application Development Platform
A local AI-powered engineering environment running Qwen3-Coder 30B to assist throughout the complete software lifecycle under zero cloud dependency. Deploys specialized sub-agents dedicated to frontend engineering, backend architecture, debugging, test generation, and automated security code reviews.
Local AI Compute Stack
An experimental compute and networking architecture designed to scale heavier local AI and security workloads, linking dedicated GPU acceleration to the local development environment via hardened remote connectivity patterns and isolated runtimes.
Technical Skills & Knowledge Domains
Structured knowledge matrix grounded in TryHackMe challenge rooms, academic study, and personal security engineering.
Structured discovery techniques applied to authorized educational challenge targets.
Protocol analysis, traffic dissection, and layer-by-layer network exploration.
Daily Linux administration, CLI mastery, and operating system permission controls.
HTTP traffic auditing, parameter manipulation, and web vulnerability analysis in lab environments.
Authorized educational password auditing, hash analysis, and authentication validation.
Controlled validation and local privilege escalation methodology in educational rooms.
Authorized educational wireless analysis and radio frame evaluation.
Core languages powering custom security tooling, automation scripts, and systems study.
Independent security engineering: private local inference, agent orchestration, and tooling.
Certifications & Structured Learning Tracks
Documented certifications and verified independent security learning paths.
Google Cybersecurity Professional Certificate
Eight-course rigorous program covering foundation of cybersecurity, network security operations, SIEM tool analysis, intrusion detection, packet inspection, incident response, and Python automation.
- check_circle Linux Command Line & Security Auditing
- check_circle Network Protocol Architecture & Packet Filtering
- check_circle Incident Response Frameworks & Documentation
TryHackMe Offensive Security & Pen-Testing Paths
Completed structured interactive learning paths focused on real-world system exploitation, Active Directory enumeration, web vulnerability assessment, and offensive persistence.
- check_circle Pre-Security & Web Fundamentals Complete
- check_circle Cyber Security 101 Path Complete
- pending Jr Penetration Tester Path (Active / In Progress)
- military_tech TryHackMe Top 2% Globally · 140+ Rooms Completed
Explore verified certificate artifacts, official credential IDs, high-resolution previews, and interactive digital viewer.
Hands-On Cybersecurity Education, Labs & Reference
Authored and maintained by Mihraj as a dedicated learning environment for cybersecurity students, developers, and aspiring penetration testers. Explore structured curricula, practice in safe interactive labs, and inspect field command manuals.
A complete cybersecurity learning methodology: master Why systems function in our foundational Theory & Concepts Path, reference How tools execute in the Command Handbook, and validate your skills inside Practical Labs.
Theory & Concepts
Hardware, OS kernel space, networking models (OSI & TCP/IP), 10-step packet journey, database fundamentals, cryptography math, and 16 side-by-side technical comparisons.
Learning Hub
12 cybersecurity disciplines, 7-stage penetration testing lifecycle, interactive concept simulators (TCP Handshake, SQLi AST), and curated CVE threat feed.
12 Practical Labs
Safe, self-contained educational targets: Nmap discovery, web fuzzing, SQL injection, Hashcat password cracking, Metasploit, and Linux SUID privilege escalation.
Command Handbook
15 comprehensive CLI manuals covering command syntax, operational flags, realistic use cases, and safety warnings for Linux, Nmap, Metasploit, Wireshark, and Burp.
Career Roadmap
Structured 11-domain progression track from computer science foundations to advanced offensive security and cloud operations with browser progress saving.
Tools & Database
13 zero-data-egress in-browser utility tools (CIDR Calc, Hash ID, JWT Inspector, Nmap Builder) + comprehensive 20-tool operational field guide.
Terminal Sandbox
Browser-based practice terminal simulating authentic outputs for essential tools: Nmap, ffuf, Hydra, Hashcat, Metasploit, and Linux bash utilities.
Resume & Professional Contact
I am actively seeking offensive security internships, penetration testing roles, and collaborative security engineering opportunities. Let's discuss defensive architecture, penetration testing workflows, or technical projects.