Skip to content
View pratikkhairnar160's full-sized avatar
🏠
Working from home
🏠
Working from home

Block or report pratikkhairnar160

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
pratikkhairnar160/README.md

Hi, I'm Pratik Khairnar πŸ‘‹

Cyber Security Researcher | VAPT | Web Application Security | Security Tool Development

Cyber Security Researcher focused on Web Application Security, Vulnerability Assessment & Penetration Testing (VAPT), Digital Forensics, and Security Tool Development.

I build practical security tools, research vulnerabilities, and continuously improve my skills through hands-on security testing, automation, and responsible vulnerability research.


Present Status

πŸ‘‰ Building open-source security tools for penetration testing and security research.

πŸ‘‰ Improving knowledge in web application vulnerabilities and application security.

πŸ‘‰ Exploring Bug Bounty Research and responsible vulnerability disclosure.

πŸ‘‰ Developing Python-based security automation tools.

πŸ‘‰ Continuously learning offensive security methodologies.

πŸš€ Security Research Journey

Currently focused on:

  • Web Application Security
  • Vulnerability Research
  • Bug Bounty Research
  • Security Automation
  • Open Source Security Tools

Building practical tools and improving offensive security skills through continuous research and hands-on testing.

πŸ” Security Skills

Web Application Security

  • Web Application Penetration Testing
  • OWASP Top 10
  • Vulnerability Assessment & Penetration Testing (VAPT)
  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • API Security
  • Authentication & Authorization Testing

Digital Forensics & Investigation

  • Cybercrime Investigation
  • Digital Evidence Analysis
  • OSINT Investigation
  • Malware & APK Analysis
  • Incident Investigation
  • Network Traffic Analysis

Security Tools

  • Burp Suite
  • Nmap
  • SQLMap
  • Nuclei
  • Nessus
  • Metasploit
  • Wireshark

πŸ› οΈ Security Projects

πŸ”₯ Vaelion-XSS

Advanced Cross-Site Scripting vulnerability scanner built with Python, Selenium, and Headless Chrome.

Features:

  • Real browser JavaScript execution verification
  • Reflected & DOM-based XSS detection
  • Custom payload support
  • JSON / HTML / TXT reporting
  • Browser-based vulnerability validation

Repository: https://github.com/pratikkhairnar160/Vaelion-XSS


πŸ”₯ Blind-SQLi

Time-Based Blind SQL Injection detection framework built for authorized security testing.

Features:

  • Database-specific payload support
  • Response-time based detection
  • Multi-threaded scanning
  • Automated reporting
  • Vulnerability triage support

Repository: https://github.com/pratikkhairnar160/Blind-SQLi


πŸ”₯ APK Malware Analyzer

Android malware analysis tool for static and dynamic security analysis.

Focus areas:

  • APK analysis
  • Malware behavior investigation
  • Security research

πŸ“œ Certifications

  • πŸ… Certified Ethical Hacker (CEH v13)
  • πŸ… Cisco Certified Network Associate (CCNA)

πŸ’» Programming

  • Python
  • JavaScript
  • Bash
  • HTML/CSS

πŸ“« Connect With Me

LinkedIn: https://linkedin.com/in/pratik-khairnar160

GitHub: https://github.com/pratikkhairnar160

Medium: https://medium.com/@vaelion000

X (Twitter): https://x.com/vaelion000

Email: [email protected]


⭐ Building security tools and continuously improving cybersecurity skills.

Pinned Loading

  1. Blind-SQLi Blind-SQLi Public

    Time-Based Blind SQL Injection detection framework for authorized penetration testing, bug bounty research, and security education.

    Python

  2. Vaelion-XSS Vaelion-XSS Public

    Advanced XSS vulnerability scanner using Selenium and real browser execution verification for authorized security testing and bug bounty research.

    Python