┌──(HEAVEN㉿kali-offensive)-[~]
└─$ sudo cat /root/.profile
╔══════════════════════════════════════════════════════════════════════════╗
║ ║
║ ███╗ ██╗██╗███████╗ █████╗ ██████╗ ██████╗ ║
║ ████╗ ██║██║██╔════╝██╔══██╗██╔══██╗██╔════╝ ║
║ ██╔██╗ ██║██║███████╗███████║██████╔╝██║ ███╗ ║
║ ██║╚██╗██║██║╚════██║██╔══██║██╔══██╗██║ ██║ ║
║ ██║ ╚████║██║███████║██║ ██║██║ ██║╚██████╔╝ ║
║ ╚═╝ ╚═══╝╚═╝╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝ ║
║ ║
║ >> ALIAS : HEAVEN ║
║ >> IDENTITY : Nisarg Chasmawala ║
║ >> ROLE : Offensive Security Engineer | Penetration Tester ║
║ >> LOCATION : England, United Kingdom ║
║ >> EDUCATION : MSc Cyber Security — Birmingham City University ║
║ (Expected Graduation: March 2027) ║
║ ║
║ >> CERTS : CPENT | CEH Master | CHFI | ISO 27001 Lead Auditor ║
║ CEH v13 | EHE (96%) | CRTOM | CTIGA | CCEP | CCPP ║
║ Foundations of Log Analysis | TOEFL iBT 91/120 ║
║ ║
║ >> FLAGSHIP : ▶ HEAVEN — Autonomous Pentest & Risk-Scoring Engine ║
║ 31 live modules · CVSS ML R²=0.9925 · async DAG core ║
║ MITRE ATT&CK · Cyber Kill Chain · OWASP Top 10 mapped ║
║ ║
║ ▶ HEAVEN-GeoIntel — Phone & Email OSINT Recon Rig ║
║ Zero-API offline · 1000+ breach DBs · 110 OSINT pivots ║
║ 64 Google Dorks · full-OPSEC identity footprinting ║
║ ║
║ >> WEAPONS : Metasploit · Burp Suite · Nessus · Maltego ║
║ Wireshark · Autopsy · FTK Imager · MITRE ATT&CK ║
║ TensorFlow · XGBoost · NetworkX · AWS IAM ║
║ ║
║ >> ML WINS : DDoS Detection — 99.99% Accuracy | 1.0000 Precision ║
║ Malware Engine — 98.47% F1-Score | Near-Perfect AUC ║
║ CVSS Prediction — R² = 0.9988 | MAE = 0.0400 ║
║ IoT Flow Predict — R² = 0.9999 | MAE = 0.0010 ║
║ ║
║ >> HACKATHON : 🥇 1st Place — BCU Cyber Security Society Hackathon ║
║ Project: Aegis-IAM Dashboard | STEAMhouse, UK ║
║ 🏅 Top 5 Finalist — UniHack 2026 | AquaSense AI ║
║ ║
║ >> MISSION : Uncover vulnerabilities. Secure critical systems. ║
║ Shape international cyberspace policy. ║
║ Build a safer digital world — one exploit at a time. ║
║ ║
║ [STATUS] ████████████████████████████████ ACTIVE — ALWAYS HUNTING ║
╚══════════════════════════════════════════════════════════════════════════╝
[HEAVEN@offensive-sec ~]$ _┌──(HEAVEN㉿kali-offensive)-[~/os-arsenal]
└─$ uname -a --all-platforms
[+] macOS ............... Daily Driver
[+] Kali Linux ............... Primary Offensive Platform
[+] Parrot OS ............... Alternate Offensive Platform
[+] Ubuntu / Debian ............... Server & Dev Environments
[+] Windows 10 / 11 ............... Target Simulation & Forensics
[+] iOS / Android ............... Mobile Security Research— CYBERSECURITY TOOLS MATRIX —
| ⚔️ Exploitation | 🔍 Recon & OSINT | 🧪 Digital Forensics | ☁️ Vuln Management |
|---|---|---|---|
Metasploit Advanced |
Nmap / Netcat Advanced |
Autopsy Advanced |
Nessus Advanced |
Burp Suite Advanced |
OSINT Framework Advanced |
FTK Imager Advanced |
OpenVAS Advanced |
SQLmap Advanced |
Maltego Advanced |
Magnet AXIOM Advanced |
AWS IAM Advanced |
Hydra Advanced |
Wireshark Advanced |
Magnet DVR Examiner Advanced |
MITRE ATT&CK Advanced |
John the Ripper Advanced |
Shodan Advanced |
MOBILeadit Advanced |
NetworkX Advanced |
Aircrack-ng Advanced |
Nikto / Acunetix Advanced |
Passware Kit Advanced |
CVSS Scoring Advanced |
Ghidra (RE) Very Good |
Snort Very Good |
Volatility Advanced |
ISO 27001 Audit Certified |
╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────────────────╗
THREAT VECTOR : Automated Vulnerability Discovery, Exploit Simulation & Risk Scoring
TECH STACK : Python · FastAPI · React · ExtraTreesRegressor · PostgreSQL (23-table)
KEY RESULT : 31 Live Modules · Async DAG Orchestrator · CVSS ML Predictor (R²=0.9925)
COMPLIANCE : AES-256-GCM Vault · HMAC Audit Logs · JWT RBAC · OWASP/NIST Mapping
╚──────────────────────────────────────────────────────────────────────────────────────────╝
Architected a production-grade autonomous penetration testing platform using Python and FastAPI, automating complex reconnaissance, vulnerability detection, and false-positive suppression workflows. Engineered a multi-layered risk scoring pipeline featuring an ExtraTreesRegressor ML model trained on NVD data to predict CVSS v3.1 base scores (R²=0.9925), augmented by real-time EPSS probabilities and CISA KEV enrichments. Integrated 31 live offensive security modules mapping directly to the MITRE ATT&CK framework, Cyber Kill Chain, and OWASP Top 10 standards, executing deep evaluations including time-based blind SQLi, SSRF, IDOR, and Active Directory Kerberoasting. Hardened the platform's execution engine with an AES-256-GCM credential vault and HMAC-signed append-only audit logs, surfacing verified attack paths via a React-based WebSocket dashboard and automated HTML/PDF compliance reporting — all powered by an asynchronous DAG orchestrator backed by a 23-table PostgreSQL schema for scalable, resumable security scanning.
╔─ MISSION BRIEF ────────────────────────────────────────────────────────────────────╗
THREAT VECTOR : OSINT Target Analysis, Identity Enrichment & Breach Correlation
TECH STACK : Next.js 14 · TypeScript · Tailwind CSS · libphonenumber-js
KEY RESULT : 110 OSINT pivots × 64 Google dorks · 1000+ Breach DBs mapped
COMPLIANCE : API Key Isolation · Token-Bucket Rate Limits · Strict CSP Headers
╚────────────────────────────────────────────────────────────────────────────────────╝
Architected a production-ready OSINT intelligence platform using Next.js 14 and TypeScript, processing phone and email variants to instantly map geographic context, threat intelligence, and identity footprints. Engineered a resilient, zero-API offline analysis engine via libphonenumber-js and bundled 400+ US/CA NPA databases to geolocate targets without triggering third-party surveillance thresholds. Integrated automated fan-out parallel queries against 1000+ breach databases (XposedOrNot) and credential hashes, visualising exposure through a matrix-themed dashboard equipped with 110 tactical OSINT pivot links and 64 pre-built Google Dorks. Hardened the application's operational security with token-bucket rate limiting (10 req/min/IP) and a 24-hour in-memory LRU cache, complete server-side API key isolation, and strict anti-tracking security headers to protect investigator integrity.
╔─ MISSION BRIEF ────────────────────────────────────────────────────────────────────╗
THREAT VECTOR : AWS Cloud IAM Over-Privilege & Privilege Escalation
TECH STACK : Python · Flask · NetworkX · MITRE ATT&CK · AWS JSON · OWASP
KEY RESULT : 57 IAM verbs × 10 enterprise tactics · 38 E2E security tests
COMPLIANCE : XSS · CSRF · JSON depth-bomb protections · SoD conflict detection
╚────────────────────────────────────────────────────────────────────────────────────╝
Architected a stateless IAM risk analysis platform using Python and Flask, processing complex AWS JSON exports to instantly detect over-privileged cloud identities and separation-of-duties conflicts. Engineered a graph-traversal detection engine via NetworkX to map multi-tiered IAM relationships, automating the discovery and severity-scoring of critical privilege escalation paths. Integrated the MITRE ATT&CK framework to map 57 dangerous IAM verbs across 10 enterprise tactics, visualising exposure through a live heatmap and deterministic posture scoring engine. Hardened the application to pass 38 E2E security tests (including XSS, CSRF, and JSON depth-bomb protections) with a dynamic CLI patch command pipeline and automated vector-based risk intelligence reporting.
╔─ MISSION BRIEF ─────────────────────────────────────────────────────────────────────╗
THREAT VECTOR : Wastewater Regulatory Breach Prediction & Tamper-Evident Auditing
TECH STACK : Node.js · React · Authenticated WebSockets · Edge Inference
KEY RESULT : 96.2% Precision · <200ms Statutory Alerts · 40+ E2E Tests Passed
COMPLIANCE : OWASP Top 10 (zero-dependency) · HMAC-SHA256 · Dual SHA-256 Chains
╚─────────────────────────────────────────────────────────────────────────────────────╝
Architected a secure, real-time IoT compliance platform using Node.js and React, processing live sensor telemetry via authenticated WebSockets to autonomously detect and remediate abnormal wastewater anomalies. Engineered an edge-inference anomaly detection engine leveraging four orthogonal mathematical models (linear regression, Z-score, Mahalanobis distance, and IQR isolation), predicting regulatory breaches with 96.2% precision. Automated dynamic Section 82 compliance reporting and incident distribution, visualising multi-site telemetry and dispatching immutable, state-aware alerts to statutory bodies in under 200 milliseconds. Hardened the infrastructure to natively mitigate the OWASP Top 10 without external dependencies, passing 40+ rigorous E2E tests and enforcing data integrity via HMAC-SHA256 signing and dual SHA-256 hash chains.
╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────╗
THREAT VECTOR : Android APK Permissions & API Call Static Analysis
TECH STACK : Python · Scikit-Learn · XGBoost · Drebin (15,000+ records)
KEY RESULT : 98.47% F1-Score · Near-perfect ROC-AUC
INNOVATION : Behaviour-based detection replacing signature scanning
╚──────────────────────────────────────────────────────────────────────────────╝
Engineered enterprise-grade Android malware pipeline evaluating L1 Regularisation, Chi-Square extraction and Random Forest feature importance on the Drebin dataset. Trained XGBoost, RF, Logistic Regression & KNN to transition from signature-based to behaviour-based threat identification at production scale.
╔─ MISSION BRIEF ────────────────────────────────────────────────────────────╗
THREAT VECTOR : Volumetric DDoS Network Intrusion Classification
TECH STACK : Python · TensorFlow · XGBoost · CIC-DDoS2019 (225K+ rows)
KEY RESULT : 1.0000 Precision · 99.99% Accuracy · ZERO false positives
MODELS TESTED : 1D-CNNs · MLPs · XGBoost · Random Forest
╚────────────────────────────────────────────────────────────────────────────╝
Built an AI-driven NIDS on the CIC-DDoS2019 dataset with robust preprocessing handling severe class imbalance. XGBoost achieved a flawless 1.0000 precision — zero false-positive alerts for security analysts while maintaining near-perfect recall for all active volumetric attack vectors.
╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────────╗
THREAT VECTOR : Automated NVD Severity Assessment via ML & Deep Learning
TECH STACK : Python · Scikit-Learn · Extra Trees · LSTM · GRU · NVD Dataset
DATASET : 337,705 historical CVE records (National Vuln. Database)
KEY RESULT : R² = 0.9988 · MAE = 0.0400 · CV R² = 0.9990 (Extra Trees)
FEATURE SELECT : Lasso · ElasticNet · Mutual Information · 13 optimal predictors
╚──────────────────────────────────────────────────────────────────────────────────╝
Architected a supervised ML + Deep Learning pipeline to automate NVD severity assessments, predicting CVSS Base Scores (0.0–10.0) across 337,705 historical CVE records. Deployed a multi-paradigm feature selection pipeline (Lasso, ElasticNet, Mutual Information) to isolate 13 critical predictors from complex vulnerability metadata. Designed and trained advanced tree-based ensembles (Extra Trees, Gradient Boosting) and recurrent neural networks (LSTM, GRU) to evaluate non-linear attack metadata. Extra Trees Regressor achieved near-perfect R² = 0.9988 · MAE = 0.0400 with a highly stable cross-validated CV R² = 0.9990, validated through MAE, RMSE, R² and 5-fold cross-validation for enterprise patch prioritisation.
╔─ MISSION BRIEF ─────────────────────────────────────────────────────────────────────────╗
THREAT VECTOR : IoT Network Flow Lifetime Forecasting & Anomaly Detection
TECH STACK : Python · TensorFlow · Scikit-Learn · RT-IoT2022 Dataset
DATASET : 117,000+ unique records · 50 raw features → optimal subsets
KEY RESULT : R² = 0.9999 · MAE = 0.0010 (Gradient Boosting, 39 features)
MODELS TESTED : Gradient Boosting · Extra Trees · AdaBoost · Huber · GRU · Transformer
╚─────────────────────────────────────────────────────────────────────────────────────────╝
Engineered a regression-based predictive model using Python, TensorFlow, and Scikit-Learn to accurately forecast the continuous wall-clock lifetime of IoT network flows for enhanced network telemetry and anomaly detection. Processed and normalised the RT-IoT2022 dataset (117,000+ unique records), designing a comprehensive multi-stage feature selection pipeline (variance filtering, correlation pruning, and Gradient-Boosting importance) to reduce 50 raw features to optimal subsets while addressing extreme right-skewness via log1p transformations. Developed and evaluated 24 experimental configurations spanning classical tree ensembles (Gradient Boosting, Extra Trees, AdaBoost), robust linear estimators (Huber), and deep sequence architectures (Gated Recurrent Units and Transformer encoders). Gradient Boosting achieved a near-perfect R² = 0.9999 · MAE = 0.0010 on a 39-feature baseline, while Extra Trees maintained R² = 0.9996 even after 87% dimensionality reduction.
╔─ MISSION BRIEF ────────────────────────────────────────────────────────────╗
THREAT VECTOR : Dynamic CVSS Replacement — Context-Aware Risk Scoring
TECH STACK : Python · Scikit-Learn · XGBoost · Feature Engineering
KEY RESULT : Real-time 0–10 context risk scores · MSE/RMSE/MAE/R² val.
INNOVATION : TCP flags · port categories · protocol features as inputs
╚────────────────────────────────────────────────────────────────────────────╝
Engineered an adaptive ML framework — reproducing and extending the Lim & Muhammad (2024) framework — transitioning vulnerability assessments from static CVSS to real-time, context-aware scoring. Processed raw network traffic features (TCP flags, port categories, protocols) via One-Hot Encoding and feature engineering. Evaluated XGBoost, RF, Decision Tree & KNN; validated with MSE, RMSE, MAE and R² for enterprise threat response prioritisation at scale.
╔════════════════════════════════════════════════════════════════════════╗
║ TIMELINE ║
╠════════════════════════════════════════════════════════════════════════╣
║ ║
║ [2025-03 → 2025-09] IT HARDWARE SUPPORT ENGINEER ║
║ NIVA TECHNO TRANSITION, Surat, India ║
║ ▸ Enterprise system installation & maintenance ║
║ ▸ Hardware, software & network diagnostics ║
║ ▸ LAN/Wi-Fi & peripheral management ║
║ ▸ Regular security checks & offsite support ║
║ ║
║ [2024-02 → 2025-02] VULNERABILITY ASSESSMENT & PENETRATION TESTER ║
║ SYSAP TECHNOLOGIES, Pune, India (Remote · P/T) ║
║ ▸ Full-scope enterprise penetration tests ║
║ ▸ Executive + technical risk report delivery ║
║ ▸ Vulnerability remediation & hardening ║
║ ▸ Maintained currency with emerging threats ║
║ ║
║ [2023-07 → 2024-01] VULNERABILITY SCANNING & PEN TEST INTERN ║
║ SYSAP TECHNOLOGIES, Pune, India ║
║ ▸ Security & vulnerability scanning ║
║ ▸ Exploitation, threat intel & compliance docs ║
║ ▸ Security research & record keeping ║
║ ║
║ [2023-01 → 2023-04] NETWORK SPECIALIST INTERN ║
║ AIRLINK COMMUNICATION PVT. LTD, Surat ║
║ ▸ Network troubleshooting & monitoring ║
║ ▸ Network configuration & documentation ║
║ ║
║ [2022-06 → 2022-07] NETWORK ENGINEER ║
║ NIVA TECHNO TRANSITION, Surat ║
║ ▸ Network infrastructure & structured cabling ║
║ ▸ Documentation, reporting & customer support ║
║ ║
╚════════════════════════════════════════════════════════════════════════╝
🔴 [CLASSIFIED] Consolidated Pentesting & RCE Assessment
Conducted end-to-end penetration testing across Redis, Openfire, and Gitea environments. Achieved system-level access via Redis replication abuse, Openfire admin console exploitation, and Git Hooks weaponization. CVSS scores up to 10.0 Critical.
Nmap · Metasploit · Redis Exploit · Git Hooks · Reverse Shells · CVSS
🔵 [CLASSIFIED] Digital Forensic Strategy — Missing Person Investigation
Designed an ISO-aligned forensic investigation plan covering corporate systems, mobile devices, IoT, cloud platforms & CCTV. Applied ISO 27037/27035/27042/27043/17025 with full UK GDPR, NPCC & FSR compliance and chain-of-custody management.
FTK Imager · Magnet AXIOM · Magnet DVR Examiner · MOBILeadit · Autopsy · Passware Kit
🟡 [CLASSIFIED] Strategic Security Audit — Cyberzone AI Ltd.
Led ISO/IEC 27001:2023 audit of AI-driven healthcare & fintech systems. Identified identity gaps, patching weaknesses & source code exposure. Evaluated compliance with UK GDPR, Data Protection Act 2018, and US HIPAA. Proposed FIDO2 MFA, immutable backups, automated patching & Purple Team exercises. Delivered full risk-scored audit report + phased mitigation roadmap.
🟣 [CLASSIFIED] AI & Autonomous Pentesting Frameworks — Research
Systematic literature review evaluating Deep Reinforcement Learning & LLMs for autonomous offensive cybersecurity. Synthesized quantitative performance metrics assessing architectural evolution from single-agent LLMs to collaborative Multi-Agent Systems (MAS). Identified the "Sim2Real" transfer gap, algorithmic hallucination risks and dual-use ethical concerns. Formulated a Neuro-Symbolic AI + HITL architecture for EU AI Act & GDPR compliance.
DRL · LLMs · Multi-Agent Systems · Neuro-Symbolic AI · EU AI Act · GDPR
🟢 [CLASSIFIED] IT Project Management: Autonomous AI-Driven Pentesting
Orchestrated a 7-week Hybrid Agile-PRINCE2 project for an autonomous AI cybersecurity system using Monday.com as the Work OS. Managed a 5-phase WBS, sprint execution, capacity planning & automated approvals. Led EU AI Act compliance deliverables under crisis resource reallocation with HITL + Neuro-Symbolic safety guardrails.
Monday.com · Agile-PRINCE2 · WBS · Risk Management · Regulatory Compliance
╔════════════════════════════════════════════════════════════════════════╗
║ ║
║ 🥇 1ST PLACE — CYBER SECURITY SOCIETY HACKATHON ║
║ Birmingham City University · STEAMhouse, UK ║
║ ║
║ PROJECT : Aegis-IAM Dashboard ║
║ Privilege Escalation & Risk Analysis Platform ║
║ ║
║ ▸ Rapidly prototyped a working MVP of an enterprise-grade IAM ║
║ risk analysis platform under strict time constraints. ║
║ ▸ Engineered a graph-based detection engine to model access ║
║ relationships, automating discovery of complex privilege ║
║ escalation chains and "toxic" role combinations. ║
║ ▸ Developed a real-time risk dashboard mapping over-privileged ║
║ cloud identities to MITRE ATT&CK, with automated remediation ║
║ playbooks and actionable posture scoring. ║
║ ║
╚════════════════════════════════════════════════════════════════════════╝
╔════════════════════════════════════════════════════════════════════════╗
║ ║
║ 🏅 TOP 5 FINALIST — UNIHACK 2026 ║
║ Birmingham City University, UK ║
║ ║
║ PROJECT : AquaSense AI ║
║ Proactive Wastewater Compliance & ║
║ Cryptographic Auditing Platform ║
║ ║
║ ▸ Co-authored a proactive environmental compliance ║
║ platform shifting from manual, reactive testing to ║
║ an autonomous, predictive compliance model. ║
║ ▸ Edge-inference layer with four stacked analytics ║
║ models (linear-regression, Mahalanobis, Z-score, IQR) ║
║ predicting compliance breaches at 96.2% precision. ║
║ ▸ Zero-dependency security: OWASP Top 10 mitigated via ║
║ WebSockets, HMAC-SHA256 response-signing, and dual ║
║ SHA-256 hash-chained logs. ║
║ ║
╚════════════════════════════════════════════════════════════════════════╝
| 🏢 Organisation | 🎯 Operation | 🔑 Skills Demonstrated |
|---|---|---|
| Deloitte | Cyber Job Simulation | Threat Analysis · Incident Reports · Mitigation |
| MasterCard | Cybersecurity Job Simulation | Payment Security · Fraud Detection · Risk Response |
| Commonwealth Bank | Intro to Cybersecurity | Risk Management · Access Control · Data Protection |
| Telstra | Cybersecurity Job Simulation | Network Security · Vulnerability Identification |
| Datacom | Cyber Security Operations | SOC · Log Analysis · Anomaly Detection |
| TATA | Cybersecurity Analyst Simulation | System Scanning · Vuln Prioritisation |
| AIG | Shields Up: Cybersecurity | Cyber Defence · Attack Scenarios · Safeguards |
| 🎓 Degree | 🏛️ Institution | 📅 | 📊 |
|---|---|---|---|
| MSc Cyber Security with Professional Placement | Birmingham City University, UK | Exp. 2027 |
— |
| BE — Computer Science & Engineering | SN Patel Institute of Technology (GTU), India | 2024 |
7.86 CGPA |
| Diploma — Computer Engineering | N.G. Patel Polytechnic College (GTU), India | 2021 |
7.80 CGPA |
| Class 10 — SSC (CBSE) | Kendriya Vidyalaya No.1, Surat | 2017 |
— |
┌──(HEAVEN㉿kali-offensive)-[~/hobbies]
└─$ cat interests.txt
[+] CTF CHALLENGES ............... Ethical Hacking Research & Capture-the-Flag
[+] APPLE ECOSYSTEM ............... Hardware/Software Troubleshooting & Emerging Tech
[+] MOBILE SECURITY ............... iOS & Android Security Research
[+] CULINARY HACKS ............... Experimenting with Varied Cuisines & Cooking#!/usr/bin/env python3
# CLASSIFICATION: TOP SECRET — CAREER INTELLIGENCE BRIEF
class NisargChasmawala_MissionPlan:
short_term_objectives = [
"Earn OSEP, CISSP — push elite certification stack further",
"Build AI-augmented security pipelines for enterprise defence",
"Deepen red team operations experience with real engagements",
]
mid_term_objectives = [
"Publish peer-reviewed research at intersection of AI + Cyber",
"Lead offensive security teams & mentor the next generation",
"Pioneer autonomous penetration testing methodologies",
]
long_term_objectives = [
"Become a globally recognised cybersecurity adviser",
"Lead development of next-generation security tools & frameworks",
"Shape international cyberspace policy & best practices",
]
ultimate_mission: str = """
Uncover every vulnerability. Secure every critical system.
Build a demonstrably safer digital world — for everyone.
"""
def execute(self) -> None:
while True:
hunt(); learn(); build(); secure(); repeat()
SELECT * FROM elite_security_engineers
WHERE alias = 'HEAVEN'
AND name = 'Nisarg Chasmawala'
AND certs IN ('CPENT','CEH_Master','CHFI','ISO_27001','CEH_v13')
AND location = 'Birmingham, England, United Kingdom'
AND status = 'ACTIVE'
AND mission = 'MAKING_DIGITAL_WORLD_SAFER';
-- 1 row returned. Target identified. ☠


