Skip to content
View Naved124's full-sized avatar
🎯
Focusing
🎯
Focusing
2 followers · 3 following

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Organizations

@NixOS

Block or report Naved124

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Naved124/README.md

Naved Khan

LinkedIn X Blog Hack The Box

About

  • B.Tech CSE student ('27) working towards offensive security / VAPT
  • Hands-on with Nmap, Burp Suite and Metasploit on Hack The Box (darkangel79, Skilled)
  • Build my own tooling in Python and Go, and run infrastructure on AWS with Terraform
  • Linux user for ~4 years (Arch + Hyprland); currently learning reverse engineering and binary exploitation
  • nixpkgs maintainer: maintain riffle in NixOS/nixpkgs

Featured work

reconforge

Scoped recon-to-report tool for authorized pentests. Runs Nmap, matches CVEs on CPE against NVD with local version-range checks, labels every CVE with a confidence level and reason (exact-cpe, confirmed-range, unconfirmed, keyword-guess), resolves vendor aliases and NVD deprecation chains, and writes a Markdown report plus commented-out Metasploit suggestions. Scope guard before every scan, Python standard library only, 108 offline tests.

cloud-event-pipeline

Go + PostgreSQL service on AWS EC2, provisioned with Terraform. Deployed by GitHub Actions through SSM Run Command with no inbound SSH; secrets live in SSM Parameter Store and are fetched through the instance's IAM role.

Tools I actually use

Nmap Burp Suite Metasploit Python Go Bash Linux AWS Terraform Docker GitHub Actions

Certifications

  • Google Cybersecurity Professional Certificate
  • Cybrary: Offensive Security Operations
  • Antisyphon Training (BHIS): SOC Core Skills with John Strand

Pinned Loading

  1. cloud-event-pipeline cloud-event-pipeline Public

    Containerized Go + PostgreSQL service on AWS EC2, provisioned with Terraform and deployed by GitHub Actions over SSM: no inbound SSH, secrets from SSM Parameter Store via IAM role.

    Go 1

  2. reconforge reconforge Public

    Scoped recon-to-report automation for authorized pentests: Nmap, NVD CVEs, script findings, Metasploit mapping

    Python 1

  3. Riffle Riffle Public

    Flashcard app for Linux, Windows and Android: study HTML and React decks, quiz yourself, track progress and make your own decks.

    JavaScript 2

  4. face-unlock face-unlock Public

    Spoof-resistant face unlock for Linux: Rust PAM module + Python face recognition with liveness detection

    Python 1

  5. Naved124.github.io Naved124.github.io Public

    CSS