KALEESWARAN S

CYBERSECURITY ANALYST & SYSTEMS ENGINEER

"Focused on host telemetry & eBPF detection, vulnerability research across web and network layers, and defensive systems hardening."

   

Cybersecurity Analyst, Systems Engineer, and Security Researcher with an engineering-first approach to information security. Blends low-level systems mechanics with offensive penetration testing to discover security gaps, build automated telemetry engines, and engineer resilient production architectures.

• Host & Systems Telemetry: Linux kernel behavioral monitoring, process tree tracking, and eBPF anomaly detection.
• Offensive Security & Red Teaming: Adversary emulation, network protocol fuzzing, web application penetration testing (OWASP Top 10), and blind database injection research.
• Defensive Engineering: Cryptographic authentication architectures (TOTP, JWT RS256, Argon2id), network container isolation, and offline EDR engines.
• Community Research: Active security researcher with DEF CON Group Coimbatore (DCG 91422).

[SYSTEM TELEMETRY SUMMARY]
Identity    : KALEESWARAN S
Discipline  : Cybersecurity Analyst & Systems Engineer
Network     : LinkedIn & GitHub Repositories
Focus Areas : eBPF Telemetry | Vulnerability Research | Security Tooling | Systems Hardening
Status      : Active & Open for Security Engineering Opportunities

Showcasing selected security research, software tooling, and architectural systems engineered for defensive resilience and offensive validation.

Offline Linux Endpoint Detection & Response Engine

System & Domain: Security Engineering & Host Telemetry
Verification Status: Completed • Functional Telemetry Prototype
Repository: github.com/KALEESWARANS-CYBER00/redalert-edr

• Overview: Offline Endpoint Detection & Response engine for host-level behavioral telemetry, anomalous process identification, and automated threat isolation on Linux.
• Threat Vector: Linux kernel-level process anomalies, unauthorized privilege escalation, stealth persistence mechanisms, and anomalous socket connections.
• Architectural Highlights:
  • Kernel behavioral telemetry & process tree monitoring
  • Heuristic rule engine for rapid anomaly detection
  • Automated process freeze and network isolation routine
  • Lightweight offline telemetry logging without cloud dependence
• Tech Stack & Core Technologies:

  

  `Python` · `Linux Kernel` · `Threat Detection` · `EDR` · `eBPF`

Adversary Simulation & Social Engineering Awareness Platform

System & Domain: Defensive Security & Adversary Simulation
Verification Status: Completed • Active Educational Engine
Repository: github.com/KALEESWARANS-CYBER00/clicktrap

• Overview: Adversary simulation and social engineering awareness platform demonstrating file camouflage, payload masquerading, and human vulnerability surfaces.
• Threat Vector: Phishing techniques, double-extension file masquerading, spear-phishing payload simulation, and employee awareness telemetry.
• Architectural Highlights:
  • Interactive adversary scenario simulation engine
  • Dynamic payload masquerade and decoy file demonstrator
  • Real-time behavioral training feedback & risk scoring
  • Educational threat breakdown and defense recommendations
• Tech Stack & Core Technologies:

  

  `React` · `Social Engineering` · `Security Education` · `Simulation`

Automated Heuristic SQL Injection Scanner & CVSS Audit Generator

System & Domain: Offensive Research & Vulnerability Assessment
Verification Status: Completed • CLI Tooling
Repository: github.com/KALEESWARANS-CYBER00/sqli-report

• Overview: Automated command-line vulnerability assessment tool conducting heuristic database injection analysis, blind verification, and structured reporting.
• Threat Vector: Unsanitized user inputs, boolean-based blind SQLi, time-based blind SQLi, and union-based extraction vectors across relational DBMS.
• Architectural Highlights:
  • Adaptive HTTP parameter crawling and payload fuzzing
  • Differential response parsing & time-anomaly verification
  • Automated vulnerability grading based on CVSS scoring
  • Structured markdown and terminal audit report generator
• Tech Stack & Core Technologies:

  

  `Python` · `Penetration Testing` · `OWASP Top 10` · `CLI Scanner`

Containerized Resolution Poisoning & Protocol Telemetry Testbed

System & Domain: Network Security & Packet Telemetry
Verification Status: Completed • Reproducible Lab
Repository: github.com/KALEESWARANS-CYBER00/dns-lab

• Overview: Containerized DNS testbed for investigating resolution poisoning, recursive query caching anomalies, and network packet telemetry.
• Threat Vector: DNS cache poisoning, Kaminsky vulnerability replication, query spoofing, and man-in-the-middle recursive resolver attacks.
• Architectural Highlights:
  • Multi-container isolated Bind9 recursive and authoritative DNS nodes
  • PCAP packet telemetry capture & Wireshark protocol dissection
  • DNSSEC cryptographic validation and integrity test suite
  • Automated attack payload simulation and anomaly logger
• Tech Stack & Core Technologies:

  

  `Docker` · `Wireshark` · `DNSSEC` · `Networking` · `Bind9`

Cryptographic Identity Verification & Hardened Token Architecture

System & Domain: Full-Stack Security & Identity Protocols
Verification Status: Completed • Production Prototype
Repository: github.com/KALEESWARANS-CYBER00/authify

• Overview: Hardened identity verification architecture implementing time-based OTP workflows, cryptographically signed JWT sessions, and rate-limited endpoints.
• Threat Vector: Credential stuffing, session hijacking, replay attacks, brute-force token guessing, and timing attacks on cryptographic hashing.
• Architectural Highlights:
  • Time-based One-Time Password (TOTP) state verification
  • Cryptographically signed, rotating JWT session management
  • Adaptive IP & user-based sliding window rate limiting
  • Constant-time token validation and Argon2id password hashing
• Tech Stack & Core Technologies:

  

  `Node.js` · `Express` · `JWT` · `REST API` · `Argon2`

Automated Attack Surface Discovery & OSINT Framework

System & Domain: Offensive Research & Attack Surface Mapping
Verification Status: Completed • Recon Framework
Repository: github.com/KALEESWARANS-CYBER00/ReconMap

• Overview: Automated attack surface discovery and reconnaissance framework conducting passive OSINT, subdomain permutation enumeration, and port telemetry.
• Threat Vector: Unmapped shadow IT assets, exposed administrative endpoints, subdomain takeover vectors, and public IP vulnerability exposures.
• Architectural Highlights:
  • Asynchronous multi-threaded subdomain bruteforcing engine
  • DNS wildcard filtering and certificate transparency log scraping
  • Integration with Nmap NSE scripts for rapid service fingerprinting
  • Comprehensive visual graph export for attack surface reporting
• Tech Stack & Core Technologies:

  

  `Python` · `Nmap API` · `OSINT` · `Reconnaissance` · `DNS Enumeration`

Terminal-Native Penetration Testing Automation Suite

System & Domain: Security Engineering & CLI Automation
Verification Status: Completed • Operational Toolkit
Repository: github.com/KALEESWARANS-CYBER00/kali-cli

• Overview: Terminal-native penetration testing automation toolkit providing standardized execution wrappers for reconnaissance, vulnerability scanning, and credential audits.
• Threat Vector: Repetitive operator errors during penetration testing engagements, missed assessment vectors, and unstandardized command outputs.
• Architectural Highlights:
  • Modular CLI orchestrator with custom bash script automation
  • Automated multi-tool execution pipelines for network discovery
  • Structured parsing of standard security utility outputs
  • Zero-dependency execution across standard Debian and Kali environments
• Tech Stack & Core Technologies:

  

  `Bash` · `Python` · `Kali Linux` · `CLI Automation` · `Security Tooling`

A comprehensive overview of competencies spanning offensive security, systems engineering, cloud architecture, and software development across 10 specialized categories:

Enterprise security posture, comprehensive threat assessment, and adversary defense.

• Offensive Security & Red Teaming: Cybersecurity, Offensive Security, Red Teaming, Penetration Testing (VAPT), Web Application Security, API Security, Network Security, Cloud Security
• Systems Defense & Threat Research: Active Directory Security, Linux Security, Windows Security, Security Assessment, Vulnerability Assessment, Threat Modeling, Security Testing, Security Auditing, Security Research

Adversary simulation, attack surface discovery, and tactical penetration testing.

• Tactical Focus: Red Teaming, VAPT, Penetration Testing, Web Security, API Security, Network Security, Active Directory Security
• Adversary Tradecraft: Initial Access Techniques, Lateral Movement, Attack Surface Analysis, Security Testing

Vulnerability research, binary exploitation, reverse engineering, and payload engineering.

• Exploit & Research Engineering: Binary Exploitation, Reverse Engineering, Shellcode Development, Payload Development, Privilege Escalation, Vulnerability Research, Web Exploitation, PoC Development
• Advanced Persistence & Operations: Post-Exploitation, Persistence Techniques, Command & Control (C2), Security Automation, CTF (Capture The Flag)

Resilient cloud infrastructure, serverless architectures, and defense-in-depth on AWS.

Certification: AWS Certified Cloud Practitioner • In Progress

Industry-standard offensive toolkits, network protocol dissectors, and debuggers.

Burp Suite · Nmap · Metasploit · Wireshark · Ghidra · GDB · pwndbg · Hashcat · John the Ripper · Hydra · sqlmap · ffuf · Gobuster · Netcat · Docker · Git · Linux · Bash · Python for Security

Modern application development across frontend, backend, APIs, and microservices.

• Core Capabilities: Full-Stack Web Dev, Java, JavaScript, TypeScript, Python (Basic), React.js, Node.js, Express.js, Spring Boot
• Architecture: REST APIs, Microservices, HTML5, CSS3, OOP, Data Structures & Algorithms

Core compiled, systems, and scripting languages for engineering and automation.

Java · JavaScript · TypeScript · Python · C · C++ · Bash · SQL

Relational DBMS, document stores, in-memory caching, and query optimization.

• Engines & Stores: MySQL, MariaDB, PostgreSQL, MongoDB, Redis
• Data Engineering: Database Design, SQL, NoSQL, Database Optimization

Event-driven architectures, distributed queuing, and scalable asynchronous processing.

Apache Kafka · Event-Driven Architecture · Message Queues · Distributed Systems · Asynchronous Processing

Containerization, automated CI/CD pipelines, and secure cloud delivery.

Git · GitHub · Docker · CI/CD · Linux · REST APIs · Microservices · Containerization · Infrastructure Fundamentals · Cloud Deployment · Application Security

 

Channels for technical discussions, vulnerability research collaboration, security audits, and full-time security engineering roles: