Nitesh Gupta
Security Engineer · Red Teamer · Penetration Tester
Mumbai, Maharashtra, India
I break into enterprise networks for a living. Active Directory attack paths, internal and external penetration testing, and the web, mobile and API layers on top of them, then write up how it was done so it can be fixed properly.
47Writeups
8Certs
11Hall of fame
4+Years
Certifications
OSCPOSCP+CRTPCNPenCEHeJPTCAPCNSP
What I do
Red teamingActive DirectoryPrivilege escalationNetwork pentestWeb & APIMobileEDR evasionPythonBash
Experience
Jan 2026 to Present
Security Engineer
Saint-Gobain INDEC
Apr 2024 to Jan 2026
Cyber Security Consultant
Security Brigade Infosec
Dec 2022 to Apr 2024
Security Researcher
Security Brigade Infosec
May 2022 to Oct 2022
Cyber Security Trainer
Encryptic Security
Featured writeups
Hokkaido
Active Directory · Enumeration across 53/domain, 80/http, 88/kerberos-sec, 135/msrpc,…
Vault
Active Directory · Enumeration across 53/domain, 88/kerberos-sec, 135/msrpc,…
Medjed
Windows · Enumeration across 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 5040/unknown,…
Algernon
Windows · Enumeration across 21/ftp, 80/http, 135/msrpc, 139/netbios-ssn,…
PyLoader
Linux · Enumeration across 22/ssh, 9666/http. Foothold to root using evil-winrm,…
All 47 walkthroughs
17 Windows · 25 Linux · 5 Active Directory
Tools
Security acknowledgements
SentinelOneSpartooJio PlatformABBNavientExtraHopSimplyCookLenskartGoFrugalGovt. of IndiaMUFG Americas
Elsewhere
There is a full Kali-style desktop version of this site.
Open the desktop experience →