SYS::IDENTITY_RESOLVED

OFFSCRIPT

SECURITY BUILDER|CTF PLAYER|LEARNING IN PUBLIC

I build small security tools, break things in controlled labs, and document the path from curiosity to capability.

VIEW BUILDS START A CONVERSATION

SCROLL_DOWN

// NODE_02 :: BUILDS

FEATURED BUILDS

Small tools and experiments — each one has a scope, a question, and a next move.

[01]ACTIVE

Security

Hatfind

A low-noise, scope-aware reconnaissance and access-control triage tool for bug-bounty work.

Read detail

Hatfind combines passive subdomain discovery, scope filtering, live-host metadata, optional controlled crawling, historical URL collection, endpoint normalization, and confidence-scored IDOR candidate triage. It is observation-only: it does not bypass authentication, mutate data, replay requests as another user, or claim that an identifier proves a vulnerability.

#Python
#subfinder
#httpx
#Katana
#IDOR triage

2026CODE ↗

[02]ACTIVE

Security

AegisForge

An explainable, deterministic red-vs-blue cybersecurity simulation with policy enforcement and audit evidence.

Read detail

AegisForge models inert prompt-injection, tool-misuse, and exfiltration attempts. Blue Team scores and classifies them, Policy Enforcer creates scoped controls, and Audit records the outcome in an append-only log. The demo is provider-free and designed to run without API keys, network services, shell access, or host-file access.

#Python
#LangGraph
#Streamlit
#Audit

2026CODE ↗

View all builds

// NODE_03 :: IDENTITY

ABOUT ME

I'm Sasmit Narnaware — a security learner and builder who is more into exploring new things than pretending to have everything figured out.

I use small projects, public notes, CTF practice, and controlled labs to understand how systems behave. This portfolio is the record: what I built, what I am investigating, and what I want to learn next.

GitHub LinkedIn Explore builds

Current interests

Security researchCTF write-upsPython projectsWeb securityOpen-source experiments

// NODE_04 :: CTF_LOG

CTF BATTLE LOG

Challenge archive

Write-ups

A dedicated home for challenge methods, technical notes, and evidence. Browse by challenge category and platform, separate from builds and blog posts.

Browse CTF write-ups

Publication record

Evidence before claims.

This log is reserved for documented CTF work. Competition results, solved counts, and learning milestones will appear when supporting information is available.

Only published challenge records appear in the archive.

// NODE_06 :: COMMS

GET IN TOUCH

TERMINAL — SASMIT_NARNAWARE

_

Find Me

GH

GitHub

SasmitNarnaware

↗

BC

Bugcrowd

0ff5cr1pt

sasmit-narnaware

Discord

990198723139227718

↗

Looking For

CTF teammates to compete with

Mentors who enjoy teaching

Study partners for learning

Open source security projects

Direct Email

sasmit.cybersec@gmail.com