┌────────────────────────────────────────────────────────────────────────────────────────┐
│ ~/sentinal404 $ nmap -sV -p- target_career --script vuln,offensive,vibe-coding │
│ [+] HOST STATUS : UP & HUNTING │
│ [+] PRIMARY TARGET : Offensive Security, Red Teaming, Cloud Engines & Architecture │
└────────────────────────────────────────────────────────────────────────────────────────┘Operator : Rishi Shakya (sentinal404)
Designation : Cybersecurity Engineer | Red Team Operator | Vibe Coder
Location : Agra, Uttar Pradesh, India
Specialization : APT Emulation, Web/Mobile VAPT, Active Directory, ICS/SCADA & Zero-Days
Competitive : TryHackMe Top 1% Global Rank • Active CTF Player • Hack The Box
Creations : Architect of Vaultia & Meri Awaaz (Decentralized Telegram Cloud Storage)
Connect : https://www.linkedin.com/in/rishishakyaResults-driven Cybersecurity Engineer and Offensive Security Specialist with a proven track record in zero-day vulnerability research — responsible for discovering and responsibly disclosing multiple high-impact CVEs, with formal recognitions from NASA and IBM.
Passionate about simulating Advanced Persistent Threats (APTs), orchestrating end-to-end VAPT across Web, Mobile, and Active Directory environments, and building high-performance decentralized software using Vibe Coding.
High-velocity, production-verified open-source projects crafted with Vibe Coding:
| Project | Description | Architecture Highlights | Links |
|---|---|---|---|
| ⚡ Vaultia | Unlimited Telegram Cloud Storage & Streaming Android App | • Native TDLib MTProto Range Streaming (2GB file bypass) • Hardware AES-256-GCM + Biometric Auth • Multi-Worker Bot Parallel Chunk Uploading • 2026 Tactile Claymorphism UI (Jetpack Compose) |
Repo • APK |
| 🎬 MeriAwaaz | Decentralized Video & Movie Streaming Portal (Zero AWS S3 Costs) | • Telegram Bot Pool CDN Video Streaming (HTTP 206) • Auto-Categorizing Shorts (≤1m) & Movies (>1m) • LinkedIn-style Visitor Alerts ("User X viewed profile") • Autonomous AI Blue Team Threat Defense |
Repo |
Responsible disclosure of zero-day vulnerabilities in enterprise and open-source infrastructure:
| CVE ID | Target Software | Vulnerability Classification | CVSS Severity |
|---|---|---|---|
 |
Grav CMS | Path Traversal & Arbitrary File Write | Critical (9.8) |
 |
Coolify | Authenticated Remote Code Execution (RCE) | High (8.8) |
 |
Frappe LMS | Privilege & Enrollment Bypass in Paid Courses | High |
 |
Joomla! Core | Improper Access Control (com_config) |
High (7.5) |
Formal security acknowledgments and Hall of Fame listings for safeguarding digital infrastructure:
- 🚀 NASA (National Aeronautics and Space Administration) — Vulnerability Research Acknowledgment
- 🏛️ Government of California — Critical Infrastructure Security Reporting
- 🏢 IBM — Security Research & Responsible Disclosure Recognition
- 📊 Grafana Labs — Application Security & Vulnerability Remediation
- 📝 Vim Editor — Open-Source Security Fix Contribution
- 🌐 Joomla CMS & Grav CMS — Core Security Exploitation & Patch Collaboration
- 🎓 Indigo-iam • Delhi Board • ZNET Technology • Sheryians Coding School
[+] VERIFIED CREDENTIALS
- 🛡️ Penetration Tester 1 (PT1) — TryHackMe (Oct 2026)
- 🏭 ICS, SCADA, MITRE & Pentest — Industrial Control Systems Security (Aug 2026)
- ⚔️ Certified Red Team Analyst (CRTA) — Offensive Security (Aug 2025)
- 🏗️ Red Team Infra-Dev (CRT-ID) — Offensive Infrastructure Development (Aug 2025)
- 🕵️ Open Source Intelligence (OSINT) — TCM Security (Jan 2025)
- 💻 Master Diploma in Computer Information & System Management (MDCIM) — RTC Computers (Aug 2024)
- 🎯 Practical Ethical Hacking (PEH) — TCM Security (Jan 2024)
- ⚡ Practical API Hacking & Bug Bounty — TCM Security (2024)
- 🚀 Jr. Penetration Tester — TryHackMe (Nov 2023)
| Domain | Weaponry & Tooling |
|---|---|
| Offensive Operations | OWASP Top 10 • Active Directory Attack Chains • APT Emulation • Red Teaming • Privilege Escalation • ICS/SCADA Pentesting |
| Security Auditing | Burp Suite Professional • Metasploit • Wireshark • Nmap • BloodHound • Frida • Ghidra • MobSF |
| OSINT & Recon | Digital Footprinting • Attack Surface Mapping • Firefox Add-on Dev (WebRecon-X) • Maltego • Python Automation |
| Engineering & Cloud | Python • Kotlin • TypeScript • React • Node.js • Express • MongoDB • Docker • Jetpack Compose • Telegram MTProto |
"The quieter you become, the more you are able to hear."
⭐ Hit a Star on my repositories if you find my work inspiring! ⭐