Chandigarh, IndiaIST

Penetration tester.
CVE author.
HTB Master.

Skill with a cause. I train to protect people, not only to earn.

Move over the range. Click to send a ping.

How an engagement goes

Pick a stage to see what I do there and what I use.

    defence

    Home lab simulating enterprise attack and defence with pfSense and Security Onion SIEM.

    analysis

    Packet and log work with Wireshark. I read the traffic after I generate it.

    code

    Python, SQL, JavaScript, TypeScript and Flask for tooling and automation.

    Hack The Box

    A snapshot of my public profile, so you do not have to go and look.

    Handle0xz7ro
    RankMaster
    Level68
    Season 7153rd of 9,300+
    Season 11Silver tier, #2357
    Machines completed50+
    bio on profile

    Penetration tester and security enthusiast focused on offensive security and vulnerability research.

    skills
    • Remote Code Execution
    • Sensitive Data Exposure
    • Reconnaissance
    focus
    • Web application
    • Enterprise network
    • Vulnerability assessment
    toolstack
    • Metasploit
    • Nmap
    • enum4linux
    • ffuf
    • BloodHound
    languages
    • Python
    • SQL
    • JavaScript

    Snapshot from my profile, October 2026. Verify it any time at profile.hackthebox.com.

    Work

    Read my writeups

    Skill should serve people

    Three rules I hold myself to, borrowed from the samurai.

    Justicegi

    I test only what I am authorised to test, and I report what I find. Protecting people comes before being clever.

    Courageyu

    Say the uncomfortable thing in the report, in the room and in public. Truth that stays quiet protects no one.

    Sinceritymakoto

    No inflated claims. Every number on this site, from the rank to the CVE, can be checked.

    I want to show the next generation that being very good at something is not only a way to earn. Poets, painters and musicians end up taking a side with their craft. I take mine with code: finding what is broken, reporting it responsibly, and backing the people who expose wrongdoing.

    Away from the keyboard

    Hackathons

    Hyperliquid Community Hackathon, 2025. 2nd place, Best use of Goldsky.

    MLH Hacks for Hackers. Prize winner.

    I enter a few every year, mostly for fun.

    On the court

    Basketball and badminton.

    The best way I know to stop staring at a screen.

    Screens

    Games on a Legion laptop with an RTX 4090.

    I run a gaming channel, PlaysZoroX, for fun. Anime and manga fill the rest, samurai stories most of all.

    Outdoors

    Nature is where I reset.

    The mountains behind this page are generated, and the sky follows the time where you are.

    Say hello

    GitHubgithub.com/YuvrajSHAD
    open
    LinkedInlinkedin.com/in/yuvrajsingh-9-
    open

    I do not publish my email. These two reach me. Chandigarh, India, UTC+5:30.