CERT-In Guidelines for Businesses (2026): Annual Audit, 6-Hour Incident Reporting & Compliance Checklist
6-hour incident reporting, 180-day logs, annual cyber security audits and DPDP overlap, with a practical compliance checklist.
Read Article →
Writing
Blog
Security research, technical writeups, and practical guides on offensive security, mobile pentesting, forensics, and AI-assisted auditing.
What Is VAPT? A Complete Guide to Vulnerability Assessment & Penetration Testing (2026)
VAPT explained: how vulnerability assessment and penetration testing differ, the types, the process, the report, and when your business needs it.
Read Article →How Much Does a Penetration Test Cost in India? (2026 Pricing Guide)
Typical VAPT and penetration testing price ranges in India, what drives the cost, and how to tell a real manual pentest from a scan with a logo on it.
Read Article →HackDrac: A Free Vulnerable Web App to Practise Ethical Hacking Legally
Meet HackDrac — an intentionally vulnerable web app for legally practising SQL injection, XSS, IDOR, and broken authentication.
Read Article →Bypassing SSL Pinning in Flutter Apps on ARM64
Binary patching libflutter.so to disable BoringSSL certificate verification when Frida gadget injection isn't viable.
Read Article →Anatomy of an Android Phishing APK Targeting Utility Users
Dissecting a malicious APK impersonating an electricity provider — infrastructure, exfiltration, and defence.
Read Article →Leveraging AI in Large-Scale Government Security Audits
Building an NLP and OCR pipeline to automate detection of exposed credentials and PII across thousands of government domains.
Read Article →