Sonu Zaiswal | Offensive Security & Cybersecurity Expert

Sonu Zaiswal Cybersecurity Profile Animated Portrait
bash - root@sonu: ~
root@sonu:~# cat profile.txt

NAME: Sonu Kumar
ROLE: Security Analyst / Network Engineer
LOC : Kathmandu, Nepal

> Cybersecurity learner focused on network security and vulnerability assessment.
> Hands-on experience in network support at WebSurfer Nepal (ISP).
> Actively building skills through CTF challenges and labs on TryHackMe.

root@sonu:~# _

> SKILL_LEVELS

NETWORK_SECURITY (VLAN, OSPF, BGP)[82%]
VULNERABILITY_ASSESSMENT[75%]
OSINT_&_RECONNAISSANCE[78%]
PYTHON_AUTOMATION[72%]
WEB_APPLICATION_SECURITY[68%]

> WRITEUPS_&_LEARNING

Notes and writeups from CTF challenges, security labs, and real-world networking experience.

How to Secure Your Home Network

A practical guide to securing routers, segmenting networks with VLANs, and reducing your attack surface at home.

[READ]

AWS Cloud Security Basics

Learning notes from the AWS Academy Cloud Security course — IAM policies, S3 bucket security, and common misconfigurations.

[READ]

Red Team Learning Path

My journey through offensive security training — privilege escalation, AD exploitation, and web application attacks.

[READ]

> TOOLS_&_PROJECTS

Final Year Project Offensive + Defensive AI Private / Academic

SecureGuard Ecosystem v2.0 Alpha

Distributed Microservices Security Suite — React Frontend · FastAPI Backend · Chrome Extension

A full-stack, AI/ML-powered cybersecurity ecosystem built as a final year project. Combines offensive vulnerability scanning with real-time defensive browser protection — phishing detection, ad blocking (including YouTube ads), a RAG-powered AI chatbot, and auto-generated PDF security reports. All three components (website, backend, extension) are deeply interconnected via REST APIs, WebSockets, and Chrome Messaging.

Architecture
React Frontend
⟷
FastAPI Backend
⟷
Chrome Extension
REST API  ·  WebSocket  ·  Chrome Messaging  ·  SQLite + SQLAlchemy  ·  Google OAuth  ·  JWT
Nuclear Vulnerability Scanner Crawls target sites with BeautifulSoup, injects SQLi / XSS / SSTI payloads, scans all 65,535 ports in parallel async batches, deduplicates via ResultCorrelator, and exports PDF reports via ReportLab.
Real-Time Browser Guard Chrome Extension intercepts every URL via chrome.tabs.onUpdated. Checks against local betting/custom blocklists and remote phishing API. Blocks popup ads, YouTube ads, and malicious sites before they load.
AI Security Chatbot (RAG) Retrieval-Augmented Generation: injects user's latest scan context into the Gemini Flash 1.5 prompt. Provides fix recommendations specific to the found vulnerabilities — not generic advice.
Auth & Cross-Component Sync Google OAuth → custom JWT minted by backend. Website injects a hidden syncAuth.js that fires chrome.runtime.sendMessage to sync the token and unlock Premium tier in the extension live.
Full Tech Stack
React + Vite Tailwind CSS FastAPI SQLite / SQLAlchemy Gemini Flash 1.5 Chrome Extension MV3 ReportLab PDF BeautifulSoup Crawler Async Port Scanner JWT + Google OAuth REST + WebSocket Nuclei Templates
Source code is private for security and academic integrity reasons. Available for review upon request.
Professional Work · Live Dubai, UAE

IDEAL STUDY ABROAD — Website & SEO LIVE

Built, managed, and maintained the full website for IDEAL STUDY ABROAD Dubai — a leading study abroad consultancy in the UAE. Handled senior SEO strategy, digital marketing campaigns, and backend development in Laravel (PHP) to drive organic traffic and lead generation.

Laravel PHP Senior SEO Digital Marketing
[VISIT SITE ↗]
Client Work · Live AI-Powered

Kushwaha Motors Website

Full-featured automotive dealership website built for a real client. Includes a custom-trained AI assistant (fine-tuned on vehicles, services & FAQs), rich GSAP scroll animations, and a responsive React frontend.

React HTML5 JavaScript Custom AI
[VISIT SITE ↗]
Reverse Engineering Open Source

PKA Unlocker NEW

Reverse-engineered Cisco Packet Tracer's 4-stage encryption pipeline (XOR byte obfuscation → Twofish EAX decryption → zlib decompression → XML patching) to unlock .pka/.pkt activity files. Students can now view their own progress, answers, and scores — 100% local, no data leaves your machine.

XOR Obfuscation → Twofish EAX → zlib → XML Patch
Python Tkinter GUI Pure-Python Twofish CMAC / CTR
[GITHUB ↗]

S.K_Analyzer

All-in-one offensive security toolkit featuring port scanning, traffic analysis, password auditing, vulnerability scanning, and more. Built with Python.

[GITHUB]

PacketSniff_Analyzer

Lightweight Python-based network packet sniffer using Scapy. Captures live traffic, logs key metadata, and provides a simple CSV output for analysis.

[GITHUB]

Rental-System-python-

Python land Rental System CLI based.

[GITHUB]

2048-Game-in-Python

A Python implementation of the classic 2048 sliding block puzzle game.

[GITHUB]

Alarm-Clock-in-Python

A functional alarm clock script written in Python for time management and alerts.

[GITHUB]

Website

E-commerce frontend Website for Printer.

[GITHUB]

Binary-Search-in-Python

A Python implementation of the binary search algorithm for efficient searching in sorted lists.

[GITHUB]

Countdown-Timer-in-Python

A simple and customizable countdown timer application built with Python.

[GITHUB]

> OPERATION_LOGS

[2024 TO PRESENT]

Digital Marketing Manager & Senior SEO @ IDEAL STUDY ABROAD — Dubai, UAE

Joined IDEAL STUDY ABROAD — a leading study abroad consultancy based in Dubai — as Digital Marketing Manager and Senior SEO specialist. Also served as the primary website handler, managing full backend development in Laravel (PHP).

MISSION_LOG: Led end-to-end SEO strategy (on-page, off-page, technical SEO) to increase organic traffic and lead generation. Managed Google Ads, social media campaigns, and content strategy. Developed and maintained the company website in Laravel/PHP, ensuring performance, security, and uptime. Coordinated digital brand identity across UAE and international markets.
[2025-08 TO 2026-02]

L2 Network Support Engineer @ WebSurfer

Handled escalated network incidents for one of Nepal's largest ISPs. Resolved complex routing anomalies, DHCP exhaustion events, and fiber outages.

INCIDENT_REPORT #BGP-442: Diagnosed a flapping BGP peering session that caused intermittent connectivity for a major hospital group. Coordinated with the NOC to apply dampening policies, restoring stability within 22 minutes.
[2022-01 TO PRESENT]

Security Learner & CTF Participant

Independent study through CTF platforms, security labs, and guided learning paths. Active on TryHackMe and Blue Team Labs Online.

FOCUS_AREAS: Network security, vulnerability scanning, web application basics, Linux privilege escalation, and cloud security fundamentals.

> CERTIFICATES.DAT

> INITIATE_HANDSHAKE

secure_channel.sh

> Secure communications channel open. Awaiting payload...

NAME=
EMAIL=
MSG=

Sonu Zaiswal - Cybersecurity Expert & Offensive Security Researcher in Nepal

Sonu Zaiswal is a prominent **Cybersecurity Specialist in Nepal**, known for his Global Top 1% ranking on TryHackMe. As a student at **Islington College Kathmandu**, he has mastered advanced penetration testing, red team operations, and network security methodologies. His professional experience as an L2 Network Support Engineer at WebSurfer Nepal provides him with deep insights into ISP-level infrastructure and defense.

Best Cybersecurity Training & Expertise in Kathmandu

Searching for the **best cybersecurity expert in Kathmandu**? Sonu Zaiswal provides expert-level vulnerability assessments, security audits, and offensive security research. He is a key figure in the **Islington College Kathmandu** technical community, contributing to the development of next-generation security practitioners in Nepal.

Offensive Security & Red Teaming

Sonu specializes in Active Directory exploitation, privilege escalation, and web application security. He is proficient in the latest security tools including Nmap, Metasploit, Burp Suite, and Kali Linux. His work is dedicated to securing Nepal's digital infrastructure against sophisticated cyber threats.

Keywords: Cybersecurity Nepal, Best Ethical Hacker Kathmandu, Islington College Kathmandu Review, Offensive Security Nepal, Sonu Kumar Security, Red Team Nepal, Penetration Testing Kathmandu, WebSurfer Nepal Engineer.