About
👋 Harsh Srivastava
Cyber Security Engineer • Pentester • Security Researcher
🧭 Who Am I
I am a passionate Cyber Security Engineer with a strong focus on identifying and exploiting real-world vulnerabilities across IoT devices, Operational Technology (OT), and Web and Mobile Applications.
My work revolves around understanding attacker mindsets, analyzing complex systems, and performing deep security assessments on connected devices and industrial environments.
I actively document my hands-on research, lab experiments, and exploitation methodologies through this blog to contribute to the cybersecurity community.
💼 Professional Experience
🏢 Tata Consultancy Services (TCS)
Role: Cyber Security Engineer / Pentester Duration: 2024 — Present
At TCS, I work on security assessments and penetration testing activities, focusing on identifying vulnerabilities, validating risks, and strengthening organizational security posture through practical offensive testing methodologies.
My work includes:
- Vulnerability Assessment & Penetration Testing (VAPT)
- IOT/OT Security Testing
- Application Security Testing
- Network Security Assessments
- Reporting & risk remediation guidance
🎓 Education
🎓 Bachelor of Technology (B.Tech)
Institute: Institute of Engineering & Management (IEM) Stream: Computer Science & Engineering Specialization: IoT, Cyber Security & Blockchain Technology (IOTCSBT)
My academic journey built the foundation for my work in:
- Embedded & IoT Security
- Network & Systems Security
- Cryptography fundamentals
- Secure application development
🔬 Research Domains
🟢 IoT Device Security
🟢 Operational Technology (ICS/SCADA) Security
🟢 Hardware Pentesting (UART • JTAG • SPI • Flash)
🟢 Firmware Extraction & Reverse Engineering
🟢 Industrial Protocol Analysis
🟢 Web Application Security Testing
🟢 Vulnerability Assessment & Penetration Testing
🛠️ Tools & Arsenal
1
2
3
4
Burp Suite • NRF Connect • Wireshark • Nmap • Metasploit
mitmproxy • tcpdump • YABE • OpenSSL
Binwalk • Frida • Objection • mbpoll • Zigbee auditor
Hardware UART/JTAG Interfaces
I combine software and hardware testing methodologies to simulate real attacker capabilities.
🧪 Practical Labs & Research
I strongly believe in hands-on offensive security.
My research workflow includes:
- PortSwigger Web Security Academy Labs
- Real device pentesting & teardown
- Firmware dumping & analysis
- Exploit development & PoC creation
- Network traffic interception
- Protocol fuzzing
This blog serves as my public research journal documenting technical findings and lab walkthroughs.
🎯 Mission & Vision
My mission is to contribute to a safer digital and industrial ecosystem by:
- Publishing deep-dive technical research
- Demonstrating real exploitation scenarios
- Raising awareness about IoT & OT threats
- Promoting secure design and deployment practices
“The more we understand how systems break, the better we can defend them.”
🤝 Connect & Collaborate
🔗 LinkedIn: linkedin.com/in/harsh01200
💻 GitHub: github.com/harsh020100
🐦 Twitter / X: twitter.com/princeX2001
📧 Email: harsh01200@gmail.com
🧾 Research Ethics & Disclosure
All research published on this blog is conducted within controlled environments or authorized testing scenarios. The objective is strictly educational and defensive — to improve security awareness and resilience.