Mihraj Mashhoor K
Cybersecurity Engineering Undergraduate · Offensive Security & Automation
Undergraduate student specializing in cybersecurity with extensive hands-on experience developed through 140+ TryHackMe rooms (Top 2% globally), structured coursework, and personal lab environments. Passionate about Linux systems, network analysis, web application security (OWASP Top 10), and local AI-assisted security workflows.
Professional Profile
I am a cybersecurity student currently pursuing a Bachelor of Technology in Computer Science & Engineering at MES College of Engineering (2024–2028). My approach pairs fundamental computer science theory—operating systems, networking, and algorithms—with continuous practical learning in virtual laboratory environments.
My hands-on security capability is grounded in over 140 completed TryHackMe rooms, positioning me in the Top 2% globally. Having completed the foundational Pre Security and Cyber Security 101 pathways, I am actively progressing through the Junior Penetration Tester curriculum, focusing on active reconnaissance, web exploitation techniques, and Linux privilege escalation vectors.
In parallel, I develop custom security tooling and offline AI agentic workflows—such as SentinelAI and the Autonomous Pentesting Agent—leveraging local models (Qwen3-Coder via Ollama) to automate vulnerability triage while ensuring zero data leakage. All security research and practical exercises are conducted strictly within authorized educational and virtual testing boundaries.
Education
Bachelor of Technology (B.Tech) · Cyber Security / Computer Science
Comprehensive degree program covering core computer science principles, discrete mathematics, software engineering, and defensive systems design.
Structured Cybersecurity Training
Google Cybersecurity Professional Certificate
Google (Virtual)
Eight-course professional series covering security models, Linux CLI, network security, Python scripting, SIEM tools, detection and response methodologies, and incident handling.
Cyber Security 101
TryHackMe
In-depth practical curriculum covering transport protocol structures, packet analysis in Wireshark, web application security concepts, cryptography, and defensive auditing.
Pre Security
TryHackMe
Foundational pathway establishing core network architectures, OSI layers, IP addressing and subnetting, Linux command line essentials, and fundamental web request mechanisms.
Jr Penetration Tester
TryHackMe
Active offensive security track focusing on industry testing methodologies, active network scanning, web vulnerability assessment, Burp Suite, and foundational Linux privilege escalation.
Cybersecurity Skills Matrix
Passive intelligence gathering (WHOIS, DNS records), active host discovery, TCP/UDP port sweeps, service banner grabbing, and web technology identification.
OWASP Top 10 vulnerability assessment, SQL Injection (authentication bypass / union testing), Cross-Site Scripting (XSS), IDOR, session manipulation, and proxy interception.
Protocol inspection across TCP/IP and OSI layers, 3-way handshake telemetry, packet capture with tcpdump, display filtering in Wireshark, and Netcat banner probes.
Daily operation in Kali Linux and Ubuntu, Bash scripting, octal permission management, systemd service administration, process monitoring, and host hardening.
Metasploit console operations, auxiliary scanning, payload configuration, Searchsploit Exploit-DB research, reverse shell handling, and interactive TTY stabilization.
Cryptographic hash identification, offline dictionary verification with John the Ripper, Hydra authentication testing in labs, and salting/stretching security controls.
Python security scripting, custom socket port probes, automated HTTP header and status inspection with requests, regex log parsing, and CLI automation.
Offline local LLM execution (Ollama, Qwen3-Coder), automated vulnerability triage, structured JSON log analysis, agentic tool sandboxing, and prompt injection defense.
Operational Toolkit
Technical Projects
SentinelAI · Autonomous Security Assistant & Vulnerability Triage
Active Engineering ProjectAutonomous security engineering tool unifying reconnaissance log parsing, CVE correlation, and risk calculation. Employs local neural models to structure scan outputs into actionable remediation roadmaps with complete data privacy.
Autonomous Pentesting Agent · Local Agentic Security Pipeline
Agentic ArchitectureAgentic decision-making framework designed to automate educational laboratory workflows. Coordinates planning, command execution validation, output parsing, and structured reporting under strict sandboxing guardrails.
CyberAI · Security Intelligence & Log Analysis Assistant
Telemetry AnalysisTelemetry ingestion platform converting raw system logs, authentication streams, and firewall dumps into structured security incident timelines with contextual risk scoring.
OpenCode Persistent Memory · Local Persistent Memory & Retrieval System
Developer InfrastructurePortable persistent-memory integration for OpenCode featuring automatic background extraction, SQLite-authoritative storage, and dual-engine retrieval combining Chroma semantic search with resilient keyword fallback.
Local AI Compute Stack · Offline Hardware & Inference Infrastructure
InfrastructureDedicated local hardware execution environment powered by an NVIDIA RTX GPU, running containerized Ollama and Open-WebUI for private offline execution of coding and security reasoning models.
The Ethical Hacker's Command Handbook · Knowledge Base
Educational DocumentationComprehensive documentation platform spanning 15 specialized modules and 30 downloadable offline PDF companions, documenting Linux, Nmap, Metasploit, Searchsploit, web security, and automation workflows.
TryHackMe Verified Ranking & Achievements
TryHackMe exercises provide hands-on experience in attacking and defending virtual systems. Accomplishments reflect mastery across reconnaissance, privilege verification, network discovery, web application vulnerabilities, and defensive incident response.
Certifications & Credentials
Google Cybersecurity Professional Certificate
Google · Issued Feb 2026
Cyber Security 101 Certificate
TryHackMe · Issued Aug 2026
Pre Security Certificate
TryHackMe · Issued May 2026
Contact & Professional Inquiry
Open to cybersecurity internships, offensive security research collaborations, junior security analyst roles, and technical discussions.