AHRIXIA_

▸ identity verified · uid=1000

ASTIK RAWAT

$ ahrixia // senior security consultant @ swarmnetics

▸ singapore offsec community ambassador

I break things on purpose so attackers can't. Half the time I'm not entirely sure what I'm doing — honestly more than half my job is troubleshooting, and somehow that works out. I'll keep at it until I can buy a patch of land, retire, and farm in Kuantan.

  • [OSCE3]
  • [OSCP+]
  • [OSWE]
  • [OSEP]
  • [CRTO]
  • [PNPT]
  • [eMAPT]
  • [OSWP]
CVEs disclosed
15+
clients secured
110+
certifications
46+
article views
70K+
./read_dossier.sh→./view_services./connect
Astik Rawat (ahrixia) — Senior Security Consultant
● livesubject_01SG / APAC

▸ ./services --list

offensive capabilities

End-to-end offensive security across application, infra, mobile, cloud and AI surfaces — delivered with reproducible PoCs and remediation guidance.

  • [WAPT]

    Web Application

    OWASP Top 10, business logic, auth bypass.

  • [MAPT]

    Mobile App

    Android & iOS — static, dynamic, runtime.

  • [NWPT]

    Network

    Internal & external infra, AD, lateral movement.

  • [WLAN]

    Wireless

    WPA2/3, Evil Twin, rogue AP, segmentation.

  • [TAPT]

    Thick Client

    Binary, IPC, traffic & local-storage abuse.

  • [HCR]

    Host Config Review

    CIS benchmarks, hardening, drift detection.

  • [PHSH]

    Phishing

    Spear, vishing & adversary-simulation campaigns.

  • [LLM]

    AI / LLM / Chatbot

    Prompt injection, jailbreaks, OWASP LLM Top 10.

  • [SCR]

    Source Code Review

    SAST + manual review across modern stacks.

  • [WAF]

    WAF Testing

    Bypass research, rule tuning, false-positive triage.

  • [CLD]

    Cloud VAPT

    AWS only — IAM, misconfig, privesc & escalation paths. Azure & GCP on the roadmap.

  • [CCR]

    Cloud Config Review

    AWS/Azure/GCP baseline & CIS benchmark review — IAM, networking, logging, KMS.

  • [OT]

    OT Pentest

    ICS / SCADA — Purdue model, protocol & segmentation review.

  • [IOT]

    IoT Pentest

    Firmware, hardware, radio & companion-app attack surface.

  • [CINF]

    Critical Infrastructure

    SWIFT systems, AS/400, mainframes and other legacy industrial platforms.

03.

projects & research_

▸ selected work — research, community contributions and engagements.