AADITHYA VIMAL
Open for workAADITHYA VIMAL · BENGALURU, INDIA

Cybersecurity
engineer who
breaks in to lock
it down.

I’m Aadithya — I hunt vulnerabilities in isolated labs, harden Linux infrastructure, and ship full-stack apps that hold up under pressure. Project Lead & Sysadmin at Alesa AI, ex-AI intern at Samsung Innovation Campus.

★ Project Lead @ Alesa AI★ Top 3% TryHackMe★ 9.55 CGPA
aadithya@forest: ~ LIVE
$▊

What I do

One engineer, four habits.

★ 4 habits, 0 fluff
01

Secure

I test systems the way an attacker would — in isolated labs — then fix what I find and write down how.

  • Linux
  • Nmap
  • VAPT
  • Hardening
02

Build

Web apps people actually enjoy using — from the interface down to the database, deployed and running in production.

  • Next.js
  • React
  • TypeScript
  • Spring Boot
03

Intelligent systems

Practical AI features: study planners, analytics in plain English, and tools that feed AI assistants better context.

  • Applied ML
  • LLM features
  • DuckDB
  • Python
04

Run systems

Servers, deployments and automation — keeping production healthy, updated and backed up.

  • Docker
  • Nginx
  • CI/CD
  • PostgreSQL

Featured work

AI2026 · Live demo · Open source · 2026

Fuzit

A local-first context engineering platform that bridges massive codebases and LLM context windows using typed dependency graphs, Knapsack token optimization, and zero-telemetry secret redaction.

My role: Designed and built the TypeScript monorepo, AST symbol extractors, knapsack token budget solver, MCP server, and VS Code extension.

  • TypeScript
  • Tree-sitter
  • tiktoken
  • MCP Server
  • VS Code API
Fuzit — codebase analysis interface

fig. 01 — fuzit, live in the terminal ↓ open ↗

Security2026 · Live demo · Open source · 2026

Horcrux

An operator-grade reconnaissance orchestration console that unifies network discovery, service fingerprinting, web fuzzing, and exploit intelligence into verified evidence workspaces.

My role: Designed and built the Typer console, Rich live progress managers, service-to-module router, and Next Best Action engine.

  • Python
  • Typer
  • Rich
  • Nmap
  • Nuclei
↓ scroll inside — it’s live
🔒horcruxtool.pages.dev
CONNECTING TO HORCRUX...
🔒 horcruxtool.pages.dev● Live — open ↗
Security2026 · Live demo · Open source · 2026

Draftoryn

A professional cybersecurity document studio generating 30 canonical offensive security, DFIR, threat intel, and GRC deliverables with a Zero Hallucination Guarantee and AES-256 encrypted export.

My role: Designed and built the cross-platform Expo studio, deterministic document engine, Hono API on Cloudflare Workers, and AES-256 ZIP packaging.

  • Expo
  • React Native Web
  • Hono
  • Neon PostgreSQL
  • Clerk Auth
↓ scroll inside — it’s live
🔒draftoryn.pages.dev
CONNECTING TO DRAFTORYN...
🔒 draftoryn.pages.dev● Live — open ↗

Open source · what I contributed to

Pushed upstream.
Merged for real.

git log — upstream
* github/explore #5375✓ merged

Detection Engineering

Merged contribution to GitHub Explore creating and curating the official topic repository for Detection Engineering methodologies, SIEM tooling, and defensive telemetry.

* github/explore #5376✓ merged

Digital Forensics

Merged contribution to GitHub Explore establishing curated resources, memory analysis tooling, and incident response frameworks for Digital Forensics.

About · snapshot

I’d rather understand a system than decorate it — from the interface all the way down to the packet trace.

B.Tech student turned Project Lead at Alesa AI Ltd. — shipping software, running Linux servers, and learning security lab by lab. The résumé has the dates; the work has the proof.

★ 9.55 CGPA★ Project Lead★ Sysadmin

Experience · snapshot

Where I’ve worked.

  1. Alesa AI Ltd. logo

    Alesa AI Ltd.

    May 2026 – Present · London, United Kingdom

    Project LeadUnix / Linux System AdministratorFull-Stack Engineer Intern
  2. Samsung Innovation Campus logo

    Samsung Innovation Campus

    Apr 2026 – Aug 2026 · Bengaluru, India

    Artificial Intelligence Intern
  3. Zaphics logo

    Zaphics

    Jan 2026 – Mar 2026 · Bengaluru, India

    Technical Lead
  4. AdihaOne Pvt. Ltd. logo

    AdihaOne Pvt. Ltd.

    Nov 2025 – Feb 2026 · Bengaluru, India

    Full-Stack Developer Intern

Why trust the work

Proof, not promises.

8

Shipped projects, most live & open source

4

Engineering roles across AI, product & infra

2

Merged contributions to GitHub Explore

★ Top 3% TryHackMe · 146 labs · 18 badges★ Google Cybersecurity · 8/8 courses★ 9.55/10 CGPA · Christ University
TryHackMe logo

Security labs · verified ranking

TryHackMe scoreboard

Top 3%

GLOBAL RANKING · EARNED LAB BY LAB

146challenge rooms cleared
18skill badges earned

Hundreds of hours of hands-on hacking and defending — networks, web apps, privilege escalation, forensics. Not exams. It’s the credential I’m proudest of because nobody can fake lab hours.

Pentest & VAPT · isolated labs

Case files:
break in, write the fix.

⚠ isolated VMs only
FILE Nº 001 — CVE-2011-2523Linux lab VM · PTES methodology

Metasploitable2 penetration test

I took a deliberately vulnerable Linux machine and broke into it step by step — then wrote up exactly how to stop each attack.

  • Full-port Nmap recon mapped the attack surface
  • VSFTPD 2.3.4 backdoor exploited to instant root
  • Shadow hashes extracted, password cracked with John the Ripper
  • Report closes with a prioritized remediation table
  • Nmap
  • Metasploit
  • John the Ripper
  • searchsploit
FILE Nº 002 — MS17-010 · CVSS 9.8Windows lab VM · VAPT + credential audit

Windows 7 EternalBlue assessment

I tested a notorious Windows vulnerability against an unpatched lab machine, took it over completely — then documented every fix.

  • SMBv1 exposure fingerprinted with Nmap scripting
  • EternalBlue exploit to NT AUTHORITY\SYSTEM shell
  • NTLM hashes dumped from memory, password cracked offline
  • Report covers patching, SMBv1 removal and password policy
  • Nmap
  • Metasploit
  • Meterpreter
  • John the Ripper

For the curious

Pick a door.

How I think about systems

Architecture, infrastructure choices, and the tradeoffs behind each project.

Go deeper

Security, responsibly

Isolated-lab research, threat intel pipelines, and what fixing things taught me.

Security work

The walkthrough

My only published writeup — a full TryHackMe run, every command reproducible.

Read the walkthrough

Contact · no forms, just email

Got something interesting?
Let’s talk.

Work, ideas, collaboration — or a system that’s behaving strangely. aadithyavimal.work@gmail.com is the fastest wire to me.