Delhi Technological University
2
Talks Delivered
2
Events Spoken At
1
Countries Visited
2
Years Speaking
2
Total Talks Given
Technical speaker and cybersecurity educator focused on offensive security and hardware research. Selected to present a technical session at CRACCON 2026 titled "Uncovering the Shadow Surface: Automated Asset Discovery and Perimeter Reconnaissance via OSINT Pipelines," breaking down large-scale telemetry ingestion and CDN origin unmasking.
Co-hosted and led an advanced OSINT and reconnaissance workshop alongside industry professionals, training attendees on real-world asset discovery workflows.
Additionally serve as a core team member at EHAX DTU, regularly designing and delivering hands-on technical sessions, Capture The Flag (CTF) walkthroughs, and security challenges for student cohorts.
Areas of Expertise
Presentation Types
Audience Types
Modern enterprise environments expand faster than asset inventories can track. Developer sandboxes, forgotten subdomains, and exposed cloud storage buckets routinely create shadow attack surfaces that bypass perimeter defenses. Attackers do not need active port scans to locate these entry points; public telemetry and open-source intelligence (OSINT) feeds already map them in real time. This session details an end-to-end framework for passive exposure reconnaissance. We break down the mechanics of querying Certificate Transparency (CT) logs, parsing reverse DNS records, and analyzing public cloud storage configurations to identify unmanaged assets without generating inbound alerts on target networks. Through a live terminal walkthrough, we introduce an automated Python discovery pipeline that aggregates passive data sources, correlates domain mutations, and flags misconfigured external endpoints. We then pivot to practical exposure management: establishing continuous asset monitoring, implementing strict DNS hygiene, and securing automated alerting pipelines to eliminate blind spots. Attendees will leave with a deployable, open-source reconnaissance script, a structured threat-hunting methodology, and actionable remediation checklists for modern cloud environments.
