Skip to content
View pdoffl's full-sized avatar
0 followers · 1 following

Block or report pdoffl

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
pdoffl/README.md

👋 Hello there, I'm Pratik Das

Welcome to my GitHub profile.

Red Team Consultant | Penetration Tester | Security Researcher

"I help organizations understand their security posture by attacking it."

I'm an offensive security professional with 3 years of hands-on experience conducting red team operations, penetration testing, and adversarial emulation across enterprise, government, and industrial control environments. Graduated with MS in Cybersecurity from Northeastern University.

Previously: Security Consultant at Ernst & Young, Cybersecurity Consultant for Government of India (commended by PM's Office 2021), and Cybersecurity Consultant Co-op at Factory Mutual.

🎯 Core Expertise

|── Offensive Security
│   ├── Red Team Operations & Adversarial Emulation (MITRE ATT&CK)
│   ├── Active Directory Exploitation (Kerberoasting, ADCS, ACL abuse)
│   ├── Web Application Penetration Testing (SQLi, XSS, RCE)
│   ├── C2 Operations (Cobalt Strike, Sliver, custom frameworks)
│   └── Post-Exploitation (Lateral Movement, Privilege Escalation, Persistence)
│
├── Security Research & Development
│   ├── Custom C2 Framework Development (ARM64/Linux)
│   ├── Exploit Development (Buffer overflows)
│   ├── Malware Analysis & Reverse Engineering
│   └── ICS/OT Security Assessment
│
└── Education & Content Creation
    ├── CTF Challenge Design & Infrastructure
    ├── Technical Blog Writing
    └── Security Lab Design Automation (Docker, Bash, Python, Virtual Machines)

🛠️ Technical Arsenal

Languages & Frameworks

C/C++ • Python • ARM64/Aarch64 Assembly • x86/x64 Assembly • Go • PowerShell • Bash • C#

Offensive Security Tools

Cobalt Strike • Metasploit • Sliver C2 • BloodHound • Mimikatz • Impacket • CrackMapExec
NetExec • Burp Suite • SQLMap • Nmap • Responder • Empire • Covenant • Havoc C2

Specializations

Active Directory Security • Web Application Security • Binary Exploitation
ICS/OT Security • Wireless Security (WPA2, EAP) • Cloud Security (AWS/GCP)
Container Security (Docker, Kubernetes) • SIEM Operations (Splunk)

📝 Publications & Research

📚 Technical Blogs

📄 Academic Publication

🎓 Capstone Research

  • Assessing PiKVM as a Threat in Modern Organizations - Analyzed weaponization of Raspberry Pi-based KVMs by APT groups, developed 5+ detection/remediation guidelines. More on my LinkedIn profile.

🏆 Certifications & Achievements

Offensive Security Certifications

  • 🔴 OSCP - Offensive Security Certified Professional
  • 🔴 CRTO - Certified Red Team Operator (Zero-Point Security)
  • 🔴 CRTP - Certified Red Team Professional (Altered Security)
  • 🔵 CEH - Certified Ethical Hacker
  • 🔵 ECSA - EC-Council Certified Security Analyst
  • 🟢 PT1 - TryHackMe Junior Penetration Tester

Recognition

  • 🏅 PM's Office Commendation (July 2021) - For offensive security and adversary emulation excellence.
  • 🥉 3rd Place - Malware Analysis CTF, Northeastern University (Spring 2025)

🤝 Let's Connect

I'm always interested in discussing offensive security, red team operations, exploit development, and security research.

Popular repositories Loading

  1. FauxRansomware FauxRansomware Public

    A proof-of-concept minimal ransomware project.

    C#

  2. LRAD LRAD Public

    A CTF challenge based on insecure OpenLDAP deployment in a docker

    Shell

  3. Reverse-Shell Reverse-Shell Public

    A simple PoC for reverse shell and its handler

    Python

  4. PowerDetect-PiKVM PowerDetect-PiKVM Public

    A PoC PowerShell script engineered to detect PiKVM connection on Windows system

    PowerShell

  5. Write-Ups Write-Ups Public

    Some write-ups for CTFs, Boot-to-Roots systems, and challenges on various platforms

  6. CanaryTakeover CanaryTakeover Public

    A Python-based PoC for a Linux based application vulnerable to stack-based buffer overflow. Implemented for NEU's CY5130 Project.

    Python