> For the complete documentation index, see [llms.txt](https://alham-rizvi.gitbook.io/alhamrizvi/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://alham-rizvi.gitbook.io/alhamrizvi/about.md). # About ## Alham Rizvi **Offensive Security Researcher & Penetration Tester** Mumbai, Maharashtra, India *** ### Who Am I I'm Alham Rizvi, a final-year CS student and offensive security researcher who started in cybersecurity 2 years ago. I specialize in Web, API, Network & Cloud Security, Exploit Development, and Kernel Development, with a particular focus on Linux kernel exploitation. I'm also increasingly focused on AI red teaming, and I spend a lot of time on general offensive security research beyond any one niche. I'm currently an unemployed penetration tester by choice, spending this year going deep on research, writeups, and open-source tooling instead of taking a job, and I plan to keep it that way until the end of the year. ```mermaid timeline title Track Record 2 years ago : Started Cybersecurity Since : #1 HTB India : #5 TryHackMe Global CTF Win : 1st Place — KJ Somaiya Oscillation CTF Disclosures : ~45 Vulnerabilities (College / Govt / Bug Bounty) August 2026 : First CVE ``` *** ### About This Blog This is my personal writeup channel, where I document offensive security research as I learn it. Some writeups here are finished, many are still in progress, and I'm aiming to clear the backlog by the end of the year. Every Sunday, I publish a deep-dive covering a specific web application attack, walking through the vulnerability, the exploitation process, and the underlying concepts in detail. ```mermaid flowchart LR A[Research: videos, labs, writeups] --> B[Weekly Sunday Deep-Dive] B --> C[Web App Pentesting Writeups] B --> D[AI Pentesting Writeups] B --> F[Kernel / Exploit Dev Research] C --> E[Published on Blog] D --> E F --> E ``` Right now my main focus areas are: * **Web Application Pentesting** — in-depth, attack-by-attack coverage * **AI Pentesting** — prompt injection, model exploitation, and AI red teaming techniques * **Kernel & Exploit Development** — primarily Linux kernel exploitation, memory corruption, and vulnerability research at the OS level *** ### What I Do ```mermaid mindmap root((Alham Rizvi)) Bug Bounty Vulnerability Discovery Responsible Disclosure Penetration Testing Web and API Network and Cloud Exploit Development Custom Exploits Shellcode and PoCs Userland Exploitation Kernel Development Linux Kernel Exploitation Kernel Module Development Privilege Escalation Research Reverse Engineering Binary Analysis Malware RE x86 / x32 / x64 AI Red Teaming Prompt Injection Model Security Adversarial Testing ``` #### Linux Kernel Exploitation Focus ```mermaid flowchart TD A[Vulnerability Research] --> B[Kernel Bug Classes] B --> C[UAF / Race Conditions] B --> D[Heap Overflows] B --> E[Type Confusion] C --> F[Exploit Primitives] D --> F E --> F F --> G[Privilege Escalation PoC] G --> H[Writeup + Disclosure] ``` #### Research Interests Breakdown ```mermaid pie title Where My Research Time Goes "Web App Pentesting" : 30 "AI Red Teaming" : 20 "Kernel / Exploit Dev" : 25 "Reverse Engineering" : 15 "Bug Bounty / Misc Research" : 10 ``` *** ### Featured Projects | Project | Description | | ---------------------- | ------------------------------------------------------------- | | **ParameterX** | Advanced parameter discovery & testing tool | | **XSSion** | Fastest reflected XSS finder — automated XSS detection | | **urlx** | Multi-source URL discovery & live host probing for recon | | **tr01d** | CLI tool for extracting sensitive info like API keys & tokens | | **rapzy** | Web UI subdomain enumeration with comprehensive scanning | | **Bug Bounty Roadmap** | Complete roadmap & guide for bug bounty hunters in 2026 | *** ### Links & Profiles **Socials** Website · LinkedIn · GitHub · Instagram · YouTube · Discord ([idkalham](https://claude.ai/chat/8c5a70e3-71ce-471d-a319-1ffbb462cb94#)) · Discord Server **Blogs & Writeups** WordPress Blog · Medium · Reddit **CTF Platforms** PicoCTF · TryHackMe · HackTheBox *** ### Get In Touch Interested in collaborating on security research, bug bounty, or pentesting engagements? **** --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://alham-rizvi.gitbook.io/alhamrizvi/about.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.