10-day longest streak
~/regaan_ Security Researcher and Offensive Security Engineer building open-source frameworks for AI/LLM security, protocol analysis, reverse engineering, protocol fuzzing, and stateful application testing. My work focuses on designing offensive tooling,…
~/regaan_
Security Researcher and Offensive Security Engineer building open-source frameworks for AI/LLM security, protocol analysis, reverse engineering, protocol fuzzing, and stateful application testing.
My work focuses on designing offensive tooling, reproducible security research platforms, and implementation-driven research for modern software and AI systems.
📍 Chennai, India
---
Research Interests
- AI & LLM Security
- Offensive Security Engineering
- Stateful Application Security
- WebSocket & Protocol Security
- Coverage-Guided Fuzzing
- Reverse Engineering
- Exploit Development
- Adversarial Machine Learning
Flagship Open Source Projects
Basilisk
Evolutionary AI Red Teaming Framework for systematic security evaluation of Large Language Models.Highlights
- Evolutionary prompt mutation
- Genetic algorithms
- Differential model testing
- OWASP LLM Top 10 attack modules
- Behavioral clustering
- Multi-model evaluation
WSHawk
Stateful WebSocket Security Assessment Platform for modern realtime applications.
Highlights
- Stateful replay engine
- Identity-aware testing
- Browser-assisted validation
- WebSocket interception
- Race condition analysis
- Authorization testing
- Evidence generation
ProtoCrash
Coverage-guided protocol fuzzing framework for binary and custom protocols.
Highlights
- Grammar-aware mutation
- Distributed fuzzing
- Coverage-guided execution
- Crash triage
- Corpus management
- Protocol parser framework
Rothalyx
Cross-platform reverse engineering framework for binary analysis.
Highlights
- Static analysis
- CFG recovery
- Intermediate Representation
- SSA
- Native decompiler
- Embedded debugger
- Plugin SDK
Other Projects
- PoCSmith — AI-assisted Proof-of-Concept generation
- LockRoot — Secure credential vault
- SQL Tamper Framework — Intelligent SQL payload transformation
- Keikaku — Custom interpreted runtime
- RedLang — LLVM-based systems programming language
Selected Publications
Basilisk
SSRN
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6373439
DOI
https://doi.org/10.2139/ssrn.6373439
Zenodo
https://doi.org/10.5281/zenodo.18909538
Citation
> Regaan R. *Basilisk: An Evolutionary AI Red-Teaming Framework for Systematic Security Evaluation of Large Language Models.* SSRN Electronic Journal. 2026.
bibtex
@article{regaan2026basilisk,
title={Basilisk: An Evolutionary AI Red-Teaming Framework for Systematic Security Evaluation of Large Language Models},
author={Regaan, R},
journal={SSRN Electronic Journal},
year={2026},
doi={10.2139/ssrn.6373439}
}---
WSHawk
Figshare
DOI (Figshare)
https://doi.org/10.6084/m9.figshare.32955467.v1
Zenodo
https://doi.org/10.5281/zenodo.21290858
Citation
> Regaan, R. (2026). *WSHawk: Stateful Security Assessment of WebSocket Applications through Adaptive Payload Mutation and Browser-Assisted Validation* (Version 4.0.1). ROT Independent Security Research Lab. https://doi.org/10.5281/zenodo.21290858
bibtex
@article{regaan2026wshawk,
author = {Regaan, R},
title = {WSHawk: Stateful Security Assessment of WebSocket Applications through Adaptive Payload Mutation and Browser-Assisted Validation},
year = {2026},
month = {7},
doi = {10.6084/m9.figshare.32955467.v1},
url = {https://figshare.com/articles/preprint/WSHawk_Stateful_Security_Assessment_of_WebSocket_Applications_through_Adaptive_Payload_Mutation_and_Browser-Assisted_Validation/32955467}
}---
Technical Stack
Programming
- Go
- C
- C++
- Python
- TypeScript
Security
- AI & LLM Security
- Web Security
- WebSocket Security
- Protocol Analysis
- Reverse Engineering
- Coverage-Guided Fuzzing
- Exploit Development
- Offensive Tooling
Systems
- Linux Internals
- LLVM
- TCP/IP
- Binary Analysis
- Virtual Machines
Infrastructure
- Docker
- Redis
- PostgreSQL
- GitHub Actions
Artificial Intelligence
- Adversarial Machine Learning
- Prompt Evolution
- Model Evaluation
- LLM Security Testing
Engineering Principles
- Build systems that mirror real offensive workflows.
- Prioritize reproducibility over isolated findings.
- Treat evidence as a first-class output.
- Favor implementation-backed research over theoretical discussion.
- Release practical open-source tooling for the security community.
Certifications
- Certified Ethical Hacker (CEH)
Connect
🌐 Website
🏢 Research Lab
💻 GitHub
https://linkedin.com/in/regaan
𝕏 X (Twitter)
---
> All research is performed in authorized environments for defensive security evaluation, education, and responsible disclosure.
-
Rothalyx ★ PINNED
Rothalyx RE FRAMEWORK is a cross-platform reverse engineering framework for binary analysis, disassembly, graph recovery, decompilation, debugging, and security research.
C++ ★ 0 3mo agoExplain → -
wshawk ★ PINNED
Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.
Python ★ 9 1d agoExplain → -
basilisk ★ PINNED
Basilisk — Open-source AI red teaming framework with genetic prompt evolution. Automated LLM security testing for GPT-4, Claude, Grok, Gemini. OWASP LLM Top 10 coverage. 32 attack modules.
Python ★ 24 3mo agoExplain → -
graphql-scanner ★ PINNED
Advanced GraphQL vulnerability scanner with async support, 100+ attack payloads, field fuzzing, and Burp Suite integration.
Python ★ 0 7mo agoExplain → -
sqlmap-tamper-collection ★ PINNED
Modern WAF bypass tamper scripts for SQLMap targeting Cloudflare, AWS WAF, and Azure WAF using 2025 evasion techniques.
Python ★ 13 5mo agoExplain → -
ProtoCrash ★ PINNED
ProtoCrash is a smart mutation-based fuzzer designed to find crashes and vulnerabilities in network protocol implementations. Built with intelligent feedback-driven fuzzing techniques, it targets custom protocols, binary formats, and network services
Python ★ 1 4mo agoExplain → -
ollama-security-research
Security research and proof-of-concept demonstrations for multiple Ollama vulnerabilities, including GGUF parser crashes and resource exhaustion issues.
Python ★ 12 27d agoExplain → -
LockRoot
Local-first password manager focused on privacy, secure vault storage, and premium offline-first security experience.
Swift ★ 5 2mo agoExplain → -
offsec-echo-response-writeups
Comprehensive writeups for all 8 weeks of the OffSec Echo Response challenge series with detailed security investigations and analysis.
★ 2 7mo agoExplain → -
litellm-vulnerability-research
Security research and proof-of-concept demonstrations for multiple LiteLLM vulnerabilities, including Authentication Bypass, SSRF, and Sandbox Escape findings.
Python ★ 1 27d agoExplain → -
c2client
Command and Control (C2) client for legitimate security research, red-team operations, and defender training to understand C2 mechanisms.
Python ★ 1 8mo agoExplain → -
keikaku-programming-language
Keikaku (計画): An aesthetic, anime-inspired programming language for masterminds. Featuring advanced generators, deterministic control flow, and native async/await for absolute code dominance.
C ★ 1 4mo agoExplain → -
PoCSmith
PoCSmith is an AI model fine-tuned on exploit code and CVE data to assist security researchers in generating proof-of-concept exploits and shellcode for defensive purposes
Python ★ 1 4mo agoExplain → -
regaan
No description.
★ 0 13d agoExplain → -
hacker-101-writeups
No description.
★ 0 2mo agoExplain → -
CVE-2026-33340
CVE-2026-33340: Critical SSRF in lollms-webui /api/proxy - Unauthenticated arbitrary request forgery (CVSS 9.1)
★ 0 3mo agoExplain → -
psycopg2 ⑂
PostgreSQL database adapter for the Python programming language
★ 0 4mo agoExplain → -
homebrew-tap
No description.
Ruby ★ 0 4mo agoExplain → -
wshawk-repo
No description.
★ 0 4mo agoExplain → -
rot-platform-security-poc
The Rothackers Platform is a full-stack cybersecurity training environment designed to simulate real-world security scenarios. It serves as a cyber range for skill development, featuring interactive challenges, real-time progress tracking, and secure communication tools.
★ 0 6mo agoExplain → -
custom-c2-rat-poc
The RothHackers RAT System is a comprehensive Command & Control (C2) framework designed for red team operations and adversary simulation. It utilizes a Redis-based communication backbone to manage distributed agents across Windows, Linux, macOS, and Android platforms.
★ 0 6mo agoExplain → -
android-framework-poc
This project demonstrates a proof-of-concept (PoC) Android framework designed to assess the security posture of mobile devices running Android 15. It highlights vulnerabilities in permission management, ContentProvider access, and background service persistence
★ 0 6mo agoExplain → -
redlang-poc
RedLang is a statically typed, systems programming language engineered specifically for security research, offensive security operations, and high-performance application development
★ 0 6mo agoExplain → -
nosql-scanner
Multi-database NoSQL injection scanner supporting MongoDB, Redis, Cassandra, and Elasticsearch with 150+ attack payloads and database cloning.
Python ★ 0 7mo agoExplain → -
nasa-space-app
No description.
Python ★ 0 1y agoExplain → -
website-templates ⑂
150+ Website Templates
★ 0 4y agoExplain →
No repos match these filters.
More creators on gitmyhub
WebDevSimplified paulirish iam-veeramalla tiangolo kennethreitz