Skip to content
View kavin-jindal's full-sized avatar
47 followers · 63 following

Achievements

Achievement: YOLOAchievement: StarstruckAchievement: Pull Shark

Achievements

Achievement: YOLOAchievement: StarstruckAchievement: Pull Shark

Block or report kavin-jindal

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kavin-jindal/README.md

KAVIN JINDAL

Security Researcher

LinkedIn Medium Avyukt Security

$ whoami

Engineering student and security researcher from India. Currently building my expertise in Cloud Security and Threat Intelligence.

>> Security Research

Project Description
CVE-2026-48778 Authored PoC for arbitrary code execution in Notepad++ -- published on Exploit-DB (EDB-52606)
CVE-2026-48800 Authored PoC -- published on GitHub
MS Edge Credential Dump PoC using raw Windows API calls (OpenProcess, MiniDumpWriteDump) to extract credentials from Edge process memory
School Admissions Portal IDOR + UNION-based SQLi leading to full database dump of applicant PII -- responsibly disclosed

>> Featured Projects

Project Description
SamsaC2 Discord-based C2 framework for authorized red team ops -- remote shell, file transfer, screenshot capture, Fernet encryption
AZeus Passive Azure cloud recon -- enumerates 23 service DNS suffixes, automated blob container discovery via REST API
Shodarc AI-powered OSINT platform -- natural language to Shodan filters, geospatial threat mapping, CVE correlation
CVE-2026-48778-PoC Proof-of-concept for Notepad++ arbitrary code execution
CVE-2026-48800-PoC Proof-of-concept exploit
MSEdge-Creds-Dumper Edge browser credential extraction via process memory dumping

>> Tech Stack

Python C/C++ PowerShell JavaScript

BurpSuite Metasploit Nmap Wireshark SQLMap Gobuster

Azure Kali Linux Ubuntu Windows Git

>> GitHub Activity

GitHub Streak

[ View All Repositories ]

Pinned Loading

  1. CVE-2026-112900-PoC CVE-2026-112900-PoC Public

    Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE).

    Python

  2. AZeus_v2 AZeus_v2 Public

    A proper end-to-end Azure pentesting toolkit

    JavaScript

  3. Shodarc Shodarc Public

    CSS

  4. MSEdge-Creds-Dumper MSEdge-Creds-Dumper Public

    A proof of concept tool that dumps Microsoft Edge's process memory to extract saved credentials using Windows API in Python

    Python 5

  5. SamsaC2 SamsaC2 Public

    A Command + Control framework built using the Discord API

    Python 5

  6. CVE-2026-48778-PoC CVE-2026-48778-PoC Public

    CVE-2026-48778 — Notepad++ Arbitrary Code Execution PoC

    Python