C2 Framework Simulator
A simplified command-and-control framework built to understand how real adversary infrastructure works — focused on learning evasion and communication, not offensive use.
Open to internships & opportunities
I'm Akhi — an intermediate cybersecurity learner. I'm getting hands-on with VAPT (vulnerability assessment & penetration testing) and I enjoy teaching what I learn. Still a student of the craft, and looking for a chance to grow.
( About )
I run Cyber Drakula, where I share what I'm learning in cybersecurity with a community of 36,000+. I'm not an expert — just someone who practices every day, breaks things to understand them, and tries to explain them simply.
( What I'm focused on )
Getting hands-on with vulnerability assessment & penetration testing — practising on labs, CTFs and intentionally-vulnerable targets, and learning to report findings clearly.
↗Building small tools and scripts in Python & Go, and breaking things apart to understand how they actually work. I learn best by doing.
↗Explaining what I learn to other beginners through Cyber Drakula. Teaching keeps my own fundamentals honest.
↗( Selected work )
A simplified command-and-control framework built to understand how real adversary infrastructure works — focused on learning evasion and communication, not offensive use.
A fully-local RAG pipeline that answers security questions against your own PDF library with zero cloud dependency — ingestion, chunking, embeddings and retrieval via Mistral on Ollama.
A threat-intelligence platform and Flask app for IP/domain reputation checks across multiple APIs, with a modular DNS enumeration engine built for speed and modern recon methodology.
Open-source tools, research notes and experiments.
github.com/ox1df↗Community I share with
Certifications earned
Tools & projects built
Years learning, hands-on
( Experience )
Early but real hands-on experience, plus the certifications I've worked for along the way.
Researched LLM security topics — prompt injection and tool-call hijacking. Supported penetration testing engagements across recon and exploitation.
Wrote Python scripts for network monitoring and alerting, and helped reduce false positives across internal systems.
Disclosed a critical vulnerability in the University's RMS portal — exposed full database access and admin escalation.
( Writing )
( Contact )