Skip to content
View Hemashankar19's full-sized avatar

Block or report Hemashankar19

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Hemashankar19/README.md

Hi, I'm Hema M

CSE-Cybersecurity Student · Offensive Security & Systems Programming

LinkedIn Gmail


About Me

I'm a Computer Science undergraduate specializing in Cybersecurity, with a particular interest in offensive security, and systems-level programming. My work sits at the intersection of breaking systems to understand them and building tools that make them harder to break.

  • Pursuing a B.Tech in Computer Science and Engineering (Cyber Security) at Amrita Vishwa Vidyapeetham, Coimbatore
  • Research focus on Active Directory attack paths and detection engineering most recently, I reproduced the "BadSuccessor" delegated Managed Service Account privilege-escalation vulnerability in an isolated lab environment and authored the corresponding Sigma detection rules, since no mainstream EDR/SIEM covers it
  • Equally engaged in systems programming, having built a compiler in C that emits native x86-64 assembly through a custom 7-stage pipeline, including a register allocator and dedicated optimization passes
  • Exploring applied AI, particularly multi agent pipelines for automating regulatory and compliance analysis
  • Currently working toward the HTB Certified Penetration Testing Specialist (CPTS) certification
  • 1st Place, ANVIL Hackathon (Scaler School of Technology)

Tech Stack

Languages C C++ Python Bash

Security & Tools Linux Metasploit Burp Suite Wireshark Nmap Splunk Active Directory Git

Coursework: Data Structures & Algorithms · Operating Systems · Computer Networks · AI/ML · DBMS · OOP · SQL · Distributed Systems · Cryptography · Network Security · Cyber Forensics


Featured Projects

dMSA BadSuccessor Detection Lab

Reproduced the "BadSuccessor" delegated Managed Service Account privilege-escalation flaw and its "Ouroboros" variant in an isolated Windows Server 2025 AD lab escalating from delegated OU rights to Domain Admin. Wrote Sigma detection rules with Wazuh/Splunk equivalents, since no mainstream EDR/SIEM catches this attack out of the box.

PowerShell Active Directory Sigma Splunk

QuantumLang Compiler

A compiler written in C for a custom language, emitting native x86-64 assembly through a 7-stage pipeline no external libraries. Includes a register allocator that reuses registers across forward references, plus optimization passes for instruction fusion and simulated annealing scheduling, benchmarked against a greedy baseline.

C Compilers x86-64

SPECTRE — Contract Compliance Automation

A multi-agent LangGraph pipeline that checks contract clauses against the DPDP Act 2023, GDPR, and RBI guidelines, then opens GitHub PRs with suggested redlines. Includes a reflection loop, a Gemini + heuristic validation layer, and an RSS watcher that re-triggers analysis when regulations change.

LangGraph Python Gemini Compliance

CallGraph

A modular OSINT framework that analyzes phone numbers, SIP logs, and domains to detect spoofing, VoIP scams, and suspicious communication patterns generating threat scores and summaries.

Python OSINT Threat Detection



Currently sharpening my offensive security skills toward HTB CPTS — always open to collaborating on security research, low-level systems projects, or AI-agent tooling.

Popular repositories Loading

  1. nitrostack nitrostack Public

    Forked from nitrocloudofficial/nitrostack

    The full-stack TypeScript framework to build, test, and deploy production-ready MCP servers and AI-native apps.

    TypeScript 1

  2. hackathon- hackathon- Public

  3. inboxpilot-openenv inboxpilot-openenv Public

    Python

  4. portfolio portfolio Public

    HTML

  5. priority-inbox-for-campus-notification priority-inbox-for-campus-notification Public

    JavaScript

  6. ad-dmsa-privilege-escalation-lab ad-dmsa-privilege-escalation-lab Public

    Lab and detection content for the AD "BadSuccessor" dMSA privilege escalation flaw reproducing the attack in an isolated Server 2025 lab and building Sigma detection rules + an exposure enumeration…

    1