hi there 👋🏽, i'm
Penetration Tester · Red Team – MERN Developer, focused on web application exploitation and adversary-driven testing, with hands-on experience as a MERN developer assessing modern applications from both attacker and builder perspectives. I analyze application logic, APIs, and trust boundaries to uncover real-world attack paths and exploitable weaknesses.
Who is Ankush Kumar Gupta?
I’m a Penetration Tester and Red Team–focused Offensive Security Practitioner, driven by a deep interest in how modern web applications fail under real adversarial conditions.
With hands-on experience assessing web applications end to end, I perform adversary-driven testing across authentication flows, APIs, business logic, and trust boundaries, focusing on realistic attack paths rather than surface-level findings.
My background as a MERN developer allows me to analyze applications from the inside out — understanding how Node.js backends, APIs, databases, and frontend logic interact, and where subtle, high-impact vulnerabilities emerge in real-world systems.
I regularly leverage automation, scripting, Linux tooling, and Large Language Models (LLMs) to accelerate reconnaissance, analysis, and payload development, while maintaining precision and depth in testing workflows.
I’m deeply interested in how systems behave under attack and continuously refine my offensive skillset through research and hands-on experimentation. When I’m not testing applications or breaking down architectures, I enjoy exploring hacker communities, learning new techniques, or unwinding with open-world games 🎮.
My Skills
Over the past couple of years, I've worked across both web development and cybersecurity projects. I actively use most of these technologies and tools in my daily workflow and few when I need them with web help:
My Projects
I’m always working on something new. Here are a few projects I’ve built, combining my skills in web development, security, and automation:
ZeroTrace is a secure, temporary file-sharing platform designed to enhance privacy. Files are available for 24 hours before they are automatically deleted, ensuring secure, token-based access for sharing sensitive data. The app is built with robust security features, including encryption and automatic file deletion, ensuring a seamless and private experience for users.
GhostGlitch is an open-source Wi-Fi penetration testing tool designed to automate network scanning, WPS detection, deauthentication attacks, and handshake capture. Built for security professionals, it supports multiple Linux distros and provides a comprehensive overview of networks, including WPA3 support and it works well on 2.4 GHz and 5 GHz.
A professional, responsive error page handler that displays elegant, animated error pages for HTTP errors like 404, 403, 500, etc. The solution includes smooth animations and integrates secure HTAccess configurations to restrict unauthorized file access, enhancing user experience even during errors.
A powerful Python-based tool that extracts and decrypts saved login credentials from Chromium-based browsers like Chrome, Edge, Brave, and Opera. It utilizes DPAPI and AES-GCM decryption to securely retrieve stored passwords and exports them into CSV files for analysis or secure storage. Designed for cybersecurity research and educational use.
My Journey
Self-Employed | GitHub | Personal Projects
Developed and deployed multiple web applications, including a custom PHP & WordPress-based eCommerce-blogging platform hosted and maintained personally. Currently conducting in-depth research on Windows Privilege Escalation, aiming to publish a technical paper by the end of 2025. Actively maintaining and scaling open-source cybersecurity and development tools on GitHub, tailored for multiple OS distributions. Preparing a formal bug report submission for Microsoft following the conclusion of the research paper.
Donvill Dynamic Private Limited
Founded and managed a gaming management company aimed at connecting talented gamers with professional competitions. Led a team, managed finances, hired 20+ contracted players, and secured sponsorships. Focused on keeping expenses low while delivering a seamless gaming setup. Exited with a profitable return on my full investment to focus on further studies and new ventures.
Have a project? or just looking to hire?
Feel free to reach out if you're looking to hire, just want to connect or see if we can build something amazing together.
