Skip to content
View nishu2402's full-sized avatar
🎯
Focusing
🎯
Focusing

Highlights

  • Pro

Block or report nishu2402

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nishu2402/README.md

[ 01 ]SYSTEM PROFILE: WHOAMI

┌──(HEAVEN㉿kali-offensive)-[~]
└─$ sudo cat /root/.profile

╔══════════════════════════════════════════════════════════════════════════╗
║                                                                          ║
║    ███╗   ██╗██╗███████╗ █████╗ ██████╗  ██████╗                         ║
║    ████╗  ██║██║██╔════╝██╔══██╗██╔══██╗██╔════╝                         ║
║    ██╔██╗ ██║██║███████╗███████║██████╔╝██║  ███╗                        ║
║    ██║╚██╗██║██║╚════██║██╔══██║██╔══██╗██║   ██║                        ║
║    ██║ ╚████║██║███████║██║  ██║██║  ██║╚██████╔╝                        ║
║    ╚═╝  ╚═══╝╚═╝╚══════╝╚═╝  ╚═╝╚═╝  ╚═╝ ╚═════╝                         ║
║                                                                          ║
║  >> ALIAS     :  HEAVEN                                                  ║
║  >> IDENTITY  :  Nisarg Chasmawala                                       ║
║  >> ROLE      :  Offensive Security Engineer | Penetration Tester        ║
║  >> LOCATION  :  England, United Kingdom                                 ║
║  >> EDUCATION :  MSc Cyber Security — Birmingham City University         ║
║                  (Expected Graduation: March 2027)                       ║
║                                                                          ║
║  >> CERTS     :  CPENT | CEH Master | CHFI | ISO 27001 Lead Auditor      ║
║                  CEH v13 | EHE (96%) | CRTOM | CTIGA | CCEP | CCPP       ║
║                  Foundations of Log Analysis | TOEFL iBT 91/120          ║
║                                                                          ║
║  >> FLAGSHIP  :  ▶ HEAVEN — Autonomous Pentest & Risk-Scoring Engine     ║
║                  31 live modules · CVSS ML R²=0.9925 · async DAG core    ║
║                  MITRE ATT&CK · Cyber Kill Chain · OWASP Top 10 mapped   ║
║                                                                          ║
║                  ▶ HEAVEN-GeoIntel — Phone & Email OSINT Recon Rig       ║
║                  Zero-API offline · 1000+ breach DBs · 110 OSINT pivots  ║
║                  64 Google Dorks · full-OPSEC identity footprinting      ║
║                                                                          ║
║  >> WEAPONS   :  Metasploit · Burp Suite · Nessus · Maltego              ║
║                  Wireshark · Autopsy · FTK Imager · MITRE ATT&CK         ║
║                  TensorFlow · XGBoost · NetworkX · AWS IAM               ║
║                                                                          ║
║  >> ML WINS   :  DDoS Detection    — 99.99% Accuracy | 1.0000 Precision  ║
║                  Malware Engine    — 98.47% F1-Score | Near-Perfect AUC  ║
║                  CVSS Prediction   — R² = 0.9988     | MAE = 0.0400      ║
║                  IoT Flow Predict  — R² = 0.9999     | MAE = 0.0010      ║
║                                                                          ║
║  >> HACKATHON :  🥇 1st Place — BCU Cyber Security Society Hackathon     ║
║                  Project: Aegis-IAM Dashboard | STEAMhouse, UK           ║
║                  🏅 Top 5 Finalist — UniHack 2026 | AquaSense AI         ║
║                                                                          ║
║  >> MISSION   :  Uncover vulnerabilities. Secure critical systems.       ║
║                  Shape international cyberspace policy.                  ║
║                  Build a safer digital world — one exploit at a time.    ║
║                                                                          ║
║  [STATUS]  ████████████████████████████████  ACTIVE — ALWAYS HUNTING     ║
╚══════════════════════════════════════════════════════════════════════════╝

[HEAVEN@offensive-sec ~]$ _

[ 02 ] ⚔️ ATTACK SURFACE: SKILLS MATRIX

— CORE LANGUAGES & PLATFORMS —

— AI & MACHINE LEARNING ARSENAL —

— OPERATING SYSTEMS —


┌──(HEAVEN㉿kali-offensive)-[~/os-arsenal]
└─$ uname -a --all-platforms

  [+] macOS              ............... Daily Driver
  [+] Kali Linux         ............... Primary Offensive Platform
  [+] Parrot OS          ............... Alternate Offensive Platform
  [+] Ubuntu / Debian    ............... Server & Dev Environments
  [+] Windows 10 / 11    ............... Target Simulation & Forensics
  [+] iOS / Android      ............... Mobile Security Research

— CYBERSECURITY TOOLS MATRIX —

⚔️ Exploitation 🔍 Recon & OSINT 🧪 Digital Forensics ☁️ Vuln Management
Metasploit Advanced Nmap / Netcat Advanced Autopsy Advanced Nessus Advanced
Burp Suite Advanced OSINT Framework Advanced FTK Imager Advanced OpenVAS Advanced
SQLmap Advanced Maltego Advanced Magnet AXIOM Advanced AWS IAM Advanced
Hydra Advanced Wireshark Advanced Magnet DVR Examiner Advanced MITRE ATT&CK Advanced
John the Ripper Advanced Shodan Advanced MOBILeadit Advanced NetworkX Advanced
Aircrack-ng Advanced Nikto / Acunetix Advanced Passware Kit Advanced CVSS Scoring Advanced
Ghidra (RE) Very Good Snort Very Good Volatility Advanced ISO 27001 Audit Certified

[ 03 ] 🚀 REAL-WORLD PROJECTS: ZERO-DAY TO DEPLOY


PROJECT 01 — HEAVEN

Autonomous Penetration Testing & Risk Scoring Platform

Repo

╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Automated Vulnerability Discovery, Exploit Simulation & Risk Scoring
  TECH STACK     : Python · FastAPI · React · ExtraTreesRegressor · PostgreSQL (23-table)
  KEY RESULT     : 31 Live Modules · Async DAG Orchestrator · CVSS ML Predictor (R²=0.9925)
  COMPLIANCE     : AES-256-GCM Vault · HMAC Audit Logs · JWT RBAC · OWASP/NIST Mapping
╚──────────────────────────────────────────────────────────────────────────────────────────╝

Architected a production-grade autonomous penetration testing platform using Python and FastAPI, automating complex reconnaissance, vulnerability detection, and false-positive suppression workflows. Engineered a multi-layered risk scoring pipeline featuring an ExtraTreesRegressor ML model trained on NVD data to predict CVSS v3.1 base scores (R²=0.9925), augmented by real-time EPSS probabilities and CISA KEV enrichments. Integrated 31 live offensive security modules mapping directly to the MITRE ATT&CK framework, Cyber Kill Chain, and OWASP Top 10 standards, executing deep evaluations including time-based blind SQLi, SSRF, IDOR, and Active Directory Kerberoasting. Hardened the platform's execution engine with an AES-256-GCM credential vault and HMAC-signed append-only audit logs, surfacing verified attack paths via a React-based WebSocket dashboard and automated HTML/PDF compliance reporting — all powered by an asynchronous DAG orchestrator backed by a 23-table PostgreSQL schema for scalable, resumable security scanning.


PROJECT 02 — HEAVEN-GEOINTEL

Open-Source Phone & Email OSINT Intelligence Platform

Repo

╔─ MISSION BRIEF ────────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : OSINT Target Analysis, Identity Enrichment & Breach Correlation
  TECH STACK     : Next.js 14 · TypeScript · Tailwind CSS · libphonenumber-js
  KEY RESULT     : 110 OSINT pivots × 64 Google dorks · 1000+ Breach DBs mapped
  COMPLIANCE     : API Key Isolation · Token-Bucket Rate Limits · Strict CSP Headers
╚────────────────────────────────────────────────────────────────────────────────────╝

Architected a production-ready OSINT intelligence platform using Next.js 14 and TypeScript, processing phone and email variants to instantly map geographic context, threat intelligence, and identity footprints. Engineered a resilient, zero-API offline analysis engine via libphonenumber-js and bundled 400+ US/CA NPA databases to geolocate targets without triggering third-party surveillance thresholds. Integrated automated fan-out parallel queries against 1000+ breach databases (XposedOrNot) and credential hashes, visualising exposure through a matrix-themed dashboard equipped with 110 tactical OSINT pivot links and 64 pre-built Google Dorks. Hardened the application's operational security with token-bucket rate limiting (10 req/min/IP) and a 24-hour in-memory LRU cache, complete server-side API key isolation, and strict anti-tracking security headers to protect investigator integrity.


PROJECT 03 — AEGIS-IAM DASHBOARD

Cloud Security & Risk Intelligence Platform · 🥇 1st Place — BCU Hackathon

Repo

╔─ MISSION BRIEF ────────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : AWS Cloud IAM Over-Privilege & Privilege Escalation
  TECH STACK     : Python · Flask · NetworkX · MITRE ATT&CK · AWS JSON · OWASP
  KEY RESULT     : 57 IAM verbs × 10 enterprise tactics · 38 E2E security tests
  COMPLIANCE     : XSS · CSRF · JSON depth-bomb protections · SoD conflict detection
╚────────────────────────────────────────────────────────────────────────────────────╝

Architected a stateless IAM risk analysis platform using Python and Flask, processing complex AWS JSON exports to instantly detect over-privileged cloud identities and separation-of-duties conflicts. Engineered a graph-traversal detection engine via NetworkX to map multi-tiered IAM relationships, automating the discovery and severity-scoring of critical privilege escalation paths. Integrated the MITRE ATT&CK framework to map 57 dangerous IAM verbs across 10 enterprise tactics, visualising exposure through a live heatmap and deterministic posture scoring engine. Hardened the application to pass 38 E2E security tests (including XSS, CSRF, and JSON depth-bomb protections) with a dynamic CLI patch command pipeline and automated vector-based risk intelligence reporting.


PROJECT 04 — AQUASENSE AI

Proactive Wastewater Compliance & Cryptographic Auditing · 🏅 Top 5 Finalist — UniHack 2026

Repo

╔─ MISSION BRIEF ─────────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Wastewater Regulatory Breach Prediction & Tamper-Evident Auditing
  TECH STACK     : Node.js · React · Authenticated WebSockets · Edge Inference
  KEY RESULT     : 96.2% Precision · <200ms Statutory Alerts · 40+ E2E Tests Passed
  COMPLIANCE     : OWASP Top 10 (zero-dependency) · HMAC-SHA256 · Dual SHA-256 Chains
╚─────────────────────────────────────────────────────────────────────────────────────╝

Architected a secure, real-time IoT compliance platform using Node.js and React, processing live sensor telemetry via authenticated WebSockets to autonomously detect and remediate abnormal wastewater anomalies. Engineered an edge-inference anomaly detection engine leveraging four orthogonal mathematical models (linear regression, Z-score, Mahalanobis distance, and IQR isolation), predicting regulatory breaches with 96.2% precision. Automated dynamic Section 82 compliance reporting and incident distribution, visualising multi-site telemetry and dispatching immutable, state-aware alerts to statutory bodies in under 200 milliseconds. Hardened the infrastructure to natively mitigate the OWASP Top 10 without external dependencies, passing 40+ rigorous E2E tests and enforcing data integrity via HMAC-SHA256 signing and dual SHA-256 hash chains.


PROJECT 05 — ANDROID MALWARE DETECTION SYSTEM

ML-Powered Mobile Threat Engine — 98.47% F1-Score

Repo

╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Android APK Permissions & API Call Static Analysis
  TECH STACK     : Python · Scikit-Learn · XGBoost · Drebin (15,000+ records)
  KEY RESULT     : 98.47% F1-Score · Near-perfect ROC-AUC
  INNOVATION     : Behaviour-based detection replacing signature scanning
╚──────────────────────────────────────────────────────────────────────────────╝

Engineered enterprise-grade Android malware pipeline evaluating L1 Regularisation, Chi-Square extraction and Random Forest feature importance on the Drebin dataset. Trained XGBoost, RF, Logistic Regression & KNN to transition from signature-based to behaviour-based threat identification at production scale.


PROJECT 06 — AI-POWERED DDoS DETECTION SYSTEM

NIDS with Deep Learning — 1.0000 Precision · 99.99% Accuracy

Repo

╔─ MISSION BRIEF ────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Volumetric DDoS Network Intrusion Classification
  TECH STACK     : Python · TensorFlow · XGBoost · CIC-DDoS2019 (225K+ rows)
  KEY RESULT     : 1.0000 Precision · 99.99% Accuracy · ZERO false positives
  MODELS TESTED  : 1D-CNNs · MLPs · XGBoost · Random Forest
╚────────────────────────────────────────────────────────────────────────────╝

Built an AI-driven NIDS on the CIC-DDoS2019 dataset with robust preprocessing handling severe class imbalance. XGBoost achieved a flawless 1.0000 precision — zero false-positive alerts for security analysts while maintaining near-perfect recall for all active volumetric attack vectors.


PROJECT 07 — AI-DRIVEN VULNERABILITY SEVERITY PREDICTOR

ML & Deep Learning Threat Assessment — R² = 0.9988 · MAE = 0.0400 · 337,705 CVEs

Repo

╔─ MISSION BRIEF ──────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Automated NVD Severity Assessment via ML & Deep Learning
  TECH STACK     : Python · Scikit-Learn · Extra Trees · LSTM · GRU · NVD Dataset
  DATASET        : 337,705 historical CVE records (National Vuln. Database)
  KEY RESULT     : R² = 0.9988 · MAE = 0.0400 · CV R² = 0.9990 (Extra Trees)
  FEATURE SELECT : Lasso · ElasticNet · Mutual Information · 13 optimal predictors
╚──────────────────────────────────────────────────────────────────────────────────╝

Architected a supervised ML + Deep Learning pipeline to automate NVD severity assessments, predicting CVSS Base Scores (0.0–10.0) across 337,705 historical CVE records. Deployed a multi-paradigm feature selection pipeline (Lasso, ElasticNet, Mutual Information) to isolate 13 critical predictors from complex vulnerability metadata. Designed and trained advanced tree-based ensembles (Extra Trees, Gradient Boosting) and recurrent neural networks (LSTM, GRU) to evaluate non-linear attack metadata. Extra Trees Regressor achieved near-perfect R² = 0.9988 · MAE = 0.0400 with a highly stable cross-validated CV R² = 0.9990, validated through MAE, RMSE, R² and 5-fold cross-validation for enterprise patch prioritisation.


PROJECT 08 — PREDICTIVE IoT NETWORK FLOW ANALYSIS

Applied ML & Telemetry — R² = 0.9999 · MAE = 0.0010 · 117,000+ Records

Repo

╔─ MISSION BRIEF ─────────────────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : IoT Network Flow Lifetime Forecasting & Anomaly Detection
  TECH STACK     : Python · TensorFlow · Scikit-Learn · RT-IoT2022 Dataset
  DATASET        : 117,000+ unique records · 50 raw features → optimal subsets
  KEY RESULT     : R² = 0.9999 · MAE = 0.0010 (Gradient Boosting, 39 features)
  MODELS TESTED  : Gradient Boosting · Extra Trees · AdaBoost · Huber · GRU · Transformer
╚─────────────────────────────────────────────────────────────────────────────────────────╝

Engineered a regression-based predictive model using Python, TensorFlow, and Scikit-Learn to accurately forecast the continuous wall-clock lifetime of IoT network flows for enhanced network telemetry and anomaly detection. Processed and normalised the RT-IoT2022 dataset (117,000+ unique records), designing a comprehensive multi-stage feature selection pipeline (variance filtering, correlation pruning, and Gradient-Boosting importance) to reduce 50 raw features to optimal subsets while addressing extreme right-skewness via log1p transformations. Developed and evaluated 24 experimental configurations spanning classical tree ensembles (Gradient Boosting, Extra Trees, AdaBoost), robust linear estimators (Huber), and deep sequence architectures (Gated Recurrent Units and Transformer encoders). Gradient Boosting achieved a near-perfect R² = 0.9999 · MAE = 0.0010 on a 39-feature baseline, while Extra Trees maintained R² = 0.9996 even after 87% dimensionality reduction.


PROJECT 09 — ADAPTIVE VULNERABILITY RISK SCORING

AI-Driven Real-Time Threat Assessment — Reproducing & Extending Lim & Muhammad (2024)

Repo

╔─ MISSION BRIEF ────────────────────────────────────────────────────────────╗
  THREAT VECTOR  : Dynamic CVSS Replacement — Context-Aware Risk Scoring
  TECH STACK     : Python · Scikit-Learn · XGBoost · Feature Engineering
  KEY RESULT     : Real-time 0–10 context risk scores · MSE/RMSE/MAE/R² val.
  INNOVATION     : TCP flags · port categories · protocol features as inputs
╚────────────────────────────────────────────────────────────────────────────╝

Engineered an adaptive ML framework — reproducing and extending the Lim & Muhammad (2024) framework — transitioning vulnerability assessments from static CVSS to real-time, context-aware scoring. Processed raw network traffic features (TCP flags, port categories, protocols) via One-Hot Encoding and feature engineering. Evaluated XGBoost, RF, Decision Tree & KNN; validated with MSE, RMSE, MAE and R² for enterprise threat response prioritisation at scale.


[ 04 ] 🏅 CERTIFICATIONS: BATTLE RIBBONS

🏅 Certification Issuer Date Score / Credential
EC-Council CPENT — Certified Penetration Tester Professional EC-Council 2024-11 ECC6970842153
EC-Council CEH Master — Certified Ethical Hacker Master EC-Council 2024-04 ECC1382059467
EC-Council CEH Practical EC-Council 2024-04 180/200 · ECC7804965321
EC-Council CEH v13 — Certified Ethical Hacker EC-Council 2025-12 ID 776964
EC-Council CEH — Certified Ethical Hacker EC-Council 2024-01 91.2% · ECC5081642397
EC-Council CHFI — Computer Hacking Forensic Investigator EC-Council 2023-12 90.7% · ECC4925367081
Mastermind ISO/IEC 27001:2022 Lead Auditor Mastermind 2026-01 ttuf1fci7e
EC-Council EHE — Ethical Hacker Essentials EC-Council 2026-01 96% · ECC8416329075
Red Team Leaders CRTOM — Certified Red Team Operations Management Red Team Leaders 2026-01
Red Team Leaders CTIGA — Threat Intelligence & Governance Analyst Red Team Leaders 2026-01
Red Team Leaders CCEP — Certified Cybersecurity Educator Professional Red Team Leaders 2026-01
Red Team Leaders CCPP — Certified C++ Practitioner Red Team Leaders 2026-01
Red Team Leaders Foundations of Log Analysis for Cyber Defense Red Team Leaders 2026-01
ETS TOEFL iBT ETS 2024-07 91 / 120

[ 05 ] 💼 FIELD OPERATIONS: EXPERIENCE LOG

╔════════════════════════════════════════════════════════════════════════╗
║  TIMELINE                                                              ║
╠════════════════════════════════════════════════════════════════════════╣
║                                                                        ║
║  [2025-03 → 2025-09]  IT HARDWARE SUPPORT ENGINEER                     ║
║                        NIVA TECHNO TRANSITION, Surat, India            ║
║                        ▸ Enterprise system installation & maintenance  ║
║                        ▸ Hardware, software & network diagnostics      ║
║                        ▸ LAN/Wi-Fi & peripheral management             ║
║                        ▸ Regular security checks & offsite support     ║
║                                                                        ║
║  [2024-02 → 2025-02]  VULNERABILITY ASSESSMENT & PENETRATION TESTER    ║
║                        SYSAP TECHNOLOGIES, Pune, India (Remote · P/T)  ║
║                        ▸ Full-scope enterprise penetration tests       ║
║                        ▸ Executive + technical risk report delivery    ║
║                        ▸ Vulnerability remediation & hardening         ║
║                        ▸ Maintained currency with emerging threats     ║
║                                                                        ║
║  [2023-07 → 2024-01]  VULNERABILITY SCANNING & PEN TEST INTERN         ║
║                        SYSAP TECHNOLOGIES, Pune, India                 ║
║                        ▸ Security & vulnerability scanning             ║
║                        ▸ Exploitation, threat intel & compliance docs  ║
║                        ▸ Security research & record keeping            ║
║                                                                        ║
║  [2023-01 → 2023-04]  NETWORK SPECIALIST INTERN                        ║
║                        AIRLINK COMMUNICATION PVT. LTD, Surat           ║
║                        ▸ Network troubleshooting & monitoring          ║
║                        ▸ Network configuration & documentation         ║
║                                                                        ║
║  [2022-06 → 2022-07]  NETWORK ENGINEER                                 ║
║                        NIVA TECHNO TRANSITION, Surat                   ║
║                        ▸ Network infrastructure & structured cabling   ║
║                        ▸ Documentation, reporting & customer support   ║
║                                                                        ║
╚════════════════════════════════════════════════════════════════════════╝

[ 06 ] 🎓 MSc MISSIONS: ACADEMIC PROJECTS — BCU

🔴 [CLASSIFIED] Consolidated Pentesting & RCE Assessment

Conducted end-to-end penetration testing across Redis, Openfire, and Gitea environments. Achieved system-level access via Redis replication abuse, Openfire admin console exploitation, and Git Hooks weaponization. CVSS scores up to 10.0 Critical.

Nmap · Metasploit · Redis Exploit · Git Hooks · Reverse Shells · CVSS

🔵 [CLASSIFIED] Digital Forensic Strategy — Missing Person Investigation

Designed an ISO-aligned forensic investigation plan covering corporate systems, mobile devices, IoT, cloud platforms & CCTV. Applied ISO 27037/27035/27042/27043/17025 with full UK GDPR, NPCC & FSR compliance and chain-of-custody management.

FTK Imager · Magnet AXIOM · Magnet DVR Examiner · MOBILeadit · Autopsy · Passware Kit

🟡 [CLASSIFIED] Strategic Security Audit — Cyberzone AI Ltd.

Led ISO/IEC 27001:2023 audit of AI-driven healthcare & fintech systems. Identified identity gaps, patching weaknesses & source code exposure. Evaluated compliance with UK GDPR, Data Protection Act 2018, and US HIPAA. Proposed FIDO2 MFA, immutable backups, automated patching & Purple Team exercises. Delivered full risk-scored audit report + phased mitigation roadmap.

🟣 [CLASSIFIED] AI & Autonomous Pentesting Frameworks — Research

Systematic literature review evaluating Deep Reinforcement Learning & LLMs for autonomous offensive cybersecurity. Synthesized quantitative performance metrics assessing architectural evolution from single-agent LLMs to collaborative Multi-Agent Systems (MAS). Identified the "Sim2Real" transfer gap, algorithmic hallucination risks and dual-use ethical concerns. Formulated a Neuro-Symbolic AI + HITL architecture for EU AI Act & GDPR compliance.

DRL · LLMs · Multi-Agent Systems · Neuro-Symbolic AI · EU AI Act · GDPR

🟢 [CLASSIFIED] IT Project Management: Autonomous AI-Driven Pentesting

Orchestrated a 7-week Hybrid Agile-PRINCE2 project for an autonomous AI cybersecurity system using Monday.com as the Work OS. Managed a 5-phase WBS, sprint execution, capacity planning & automated approvals. Led EU AI Act compliance deliverables under crisis resource reallocation with HITL + Neuro-Symbolic safety guardrails.

Monday.com · Agile-PRINCE2 · WBS · Risk Management · Regulatory Compliance


[ 07 ] 🥇 HACKATHONS: BATTLE VICTORIES

╔════════════════════════════════════════════════════════════════════════╗
║                                                                        ║
║  🥇  1ST PLACE — CYBER SECURITY SOCIETY HACKATHON                      ║
║       Birmingham City University · STEAMhouse, UK                      ║
║                                                                        ║
║  PROJECT  :  Aegis-IAM Dashboard                                       ║
║             Privilege Escalation & Risk Analysis Platform              ║
║                                                                        ║
║  ▸ Rapidly prototyped a working MVP of an enterprise-grade IAM         ║
║    risk analysis platform under strict time constraints.               ║
║  ▸ Engineered a graph-based detection engine to model access           ║
║    relationships, automating discovery of complex privilege            ║
║    escalation chains and "toxic" role combinations.                    ║
║  ▸ Developed a real-time risk dashboard mapping over-privileged        ║
║    cloud identities to MITRE ATT&CK, with automated remediation        ║
║    playbooks and actionable posture scoring.                           ║
║                                                                        ║
╚════════════════════════════════════════════════════════════════════════╝

Repo

╔════════════════════════════════════════════════════════════════════════╗
║                                                                        ║
║  🏅  TOP 5 FINALIST — UNIHACK 2026                                     ║
║       Birmingham City University, UK                                   ║
║                                                                        ║
║  PROJECT  :  AquaSense AI                                              ║
║             Proactive Wastewater Compliance &                          ║
║             Cryptographic Auditing Platform                            ║
║                                                                        ║
║  ▸ Co-authored a proactive environmental compliance                    ║
║    platform shifting from manual, reactive testing to                  ║
║    an autonomous, predictive compliance model.                         ║
║  ▸ Edge-inference layer with four stacked analytics                    ║
║    models (linear-regression, Mahalanobis, Z-score, IQR)               ║
║    predicting compliance breaches at 96.2% precision.                  ║
║  ▸ Zero-dependency security: OWASP Top 10 mitigated via                ║
║    WebSockets, HMAC-SHA256 response-signing, and dual                  ║
║    SHA-256 hash-chained logs.                                          ║
║                                                                        ║
╚════════════════════════════════════════════════════════════════════════╝

Repo


[ 08 ] 🏢 INTEL BRIEFINGS: VIRTUAL JOB SIMULATIONS 2025

🏢 Organisation 🎯 Operation 🔑 Skills Demonstrated
Deloitte Cyber Job Simulation Threat Analysis · Incident Reports · Mitigation
MasterCard Cybersecurity Job Simulation Payment Security · Fraud Detection · Risk Response
Commonwealth Bank Intro to Cybersecurity Risk Management · Access Control · Data Protection
Telstra Cybersecurity Job Simulation Network Security · Vulnerability Identification
Datacom Cyber Security Operations SOC · Log Analysis · Anomaly Detection
TATA Cybersecurity Analyst Simulation System Scanning · Vuln Prioritisation
AIG Shields Up: Cybersecurity Cyber Defence · Attack Scenarios · Safeguards

[ 09 ] 🎓 EDUCATION: TRAINING GROUND

🎓 Degree 🏛️ Institution 📅 📊
MSc Cyber Security with Professional Placement Birmingham City University, UK Exp. 2027
BE — Computer Science & Engineering SN Patel Institute of Technology (GTU), India 2024 7.86 CGPA
Diploma — Computer Engineering N.G. Patel Polytechnic College (GTU), India 2021 7.80 CGPA
Class 10 — SSC (CBSE) Kendriya Vidyalaya No.1, Surat 2017

[ 10 ] 🌍 SYSTEM LANGUAGES

   

[ 11 ] 💀 SIDE MISSIONS: HOBBIES

┌──(HEAVEN㉿kali-offensive)-[~/hobbies]
└─$ cat interests.txt

  [+] CTF CHALLENGES    ............... Ethical Hacking Research & Capture-the-Flag
  [+] APPLE ECOSYSTEM   ............... Hardware/Software Troubleshooting & Emerging Tech
  [+] MOBILE SECURITY   ............... iOS & Android Security Research
  [+] CULINARY HACKS    ............... Experimenting with Varied Cuisines & Cooking

[ 12 ] 🎯 MISSION OBJECTIVES: CAREER GOALS

#!/usr/bin/env python3
# CLASSIFICATION: TOP SECRET — CAREER INTELLIGENCE BRIEF

class NisargChasmawala_MissionPlan:

    short_term_objectives = [
        "Earn OSEP, CISSP — push elite certification stack further",
        "Build AI-augmented security pipelines for enterprise defence",
        "Deepen red team operations experience with real engagements",
    ]

    mid_term_objectives = [
        "Publish peer-reviewed research at intersection of AI + Cyber",
        "Lead offensive security teams & mentor the next generation",
        "Pioneer autonomous penetration testing methodologies",
    ]

    long_term_objectives = [
        "Become a globally recognised cybersecurity adviser",
        "Lead development of next-generation security tools & frameworks",
        "Shape international cyberspace policy & best practices",
    ]

    ultimate_mission: str = """
        Uncover every vulnerability. Secure every critical system.
        Build a demonstrably safer digital world — for everyone.
    """

    def execute(self) -> None:
        while True:
            hunt(); learn(); build(); secure(); repeat()

[ 13 ] 📈 RECONNAISSANCE: LIVE ACTIVITY GRAPH


[ 14 ] 🐍 CONTRIBUTION SNAKE — LIVE FEED

github contribution grid snake animation



SELECT * FROM elite_security_engineers
WHERE alias     = 'HEAVEN'
  AND name      = 'Nisarg Chasmawala'
  AND certs     IN ('CPENT','CEH_Master','CHFI','ISO_27001','CEH_v13')
  AND location  = 'Birmingham, England, United Kingdom'
  AND status    = 'ACTIVE'
  AND mission   = 'MAKING_DIGITAL_WORLD_SAFER';

-- 1 row returned. Target identified. ☠


[ ALL SYSTEMS SECURED — CONNECTION TERMINATED — ☠ ]

Popular repositories Loading

  1. HEAVEN-Autonomous-Penetration-Testing HEAVEN-Autonomous-Penetration-Testing Public

    A production-grade autonomous penetration testing framework built with Python and FastAPI. HEAVEN automates professional security engagements through multi-layered reconnaissance, two-stage false-p…

    Python 2

  2. intelligent-ddos-detection-system intelligent-ddos-detection-system Public

    AI-powered Network Intrusion Detection System (NIDS) for detecting and classifying DDoS attacks using machine learning and network traffic analysis.

    Jupyter Notebook 1

  3. Cyber-Security-Aegis-IAM-Dashboard Cyber-Security-Aegis-IAM-Dashboard Public

    Enterprise-grade IAM risk-analysis HUD engineered for rapid incident-response triage, featuring privilege escalation graph traversal, MITRE ATT&CK heatmapping, and dynamic remediation playbooks.

    HTML 1

  4. adaptive-vulnerability-risk-scoring adaptive-vulnerability-risk-scoring Public

    Reproducing and Extending the Lim & Muhammad (2024) Framework

    Jupyter Notebook 1

  5. android-malware-detection-ml android-malware-detection-ml Public

    Machine learning–based Android malware detection using static analysis of permissions and API calls from the Drebin-215 dataset.

    Jupyter Notebook 1

  6. nishu2402 nishu2402 Public

    1