Security Researcher · Educator · Builder
Think Like an Attacker. Secure Like a Pro.
Security Research Professional specializing in enterprise networks, web apps, Active Directory, cloud, and mobile security. Finding the vulnerabilities that matter, before attackers do.
Network Pentesting Web App VAPT AD Security Cloud Security Mobile Pentesting
Kavin Kumar
Security Researcher · Hack & Secure
Core Expertise
Enterprise Network Penetration Testing
Web Application Penetration Testing
Vulnerability Assessment and Exploitation
Active Directory Assume Breach Testing
Network Architecture and Security
Cloud Security Auditing
Mobile Application Penetration Testing
Certifications
✓
CREST CPSACertified
✓
CRTPCertified
✓
CRTACertified
✓
CEHCertified
✓
CAPCertified
100+
Projects Worked
500+
Bugs Identified
100+
P1 Findings
Let's Collab
Open for Pentest Projects
Latest Writeups
All writeups → Priv Esc Labs
Modifiable Service Binary Privilege Escalation on Windows
A running Windows service pointed at an executable that any authenticated user could overwrite. Replacing it with a payload and triggering a restart was enough to land a SYSTEM shell.
8 min read →
Priv Esc Labs
Scheduled Task Binary Replacement Privilege Escalation on Windows
An administrator-created backup folder ran a scheduled task every 5 minutes against a binary that any writer could replace — turning a routine backup job into a repeating code-execution trigger.
6 min read →
Stay in the Loop
New writeup? New tool?
You'll hear about it first.
No noise. Just a short email when I publish something worth reading — new research and writeups.
No spam. Unsubscribe anytime.
About
Kavin Kumar
Security Researcher · Hack & Secure
Security Researcher with hands-on expertise in VAPT across enterprise networks, web applications, Active Directory, cloud infrastructure, and mobile platforms. Finding the vulnerabilities that matter, before attackers do. Because real skills aren't built in classrooms. They're built in the field, by people who've actually broken things.