Student
Biotechnology student at KIIT University with a strong interest in applying structured scientific thinking to cybersecurity.
KIIT UniversityBiotechnology
Biotechnology × Cybersecurity × AI Security
Sagar Nayak
Student at KIIT University building a professional security mindset through labs, certifications, and AI security research.
I study Biotechnology at KIIT University and have been learning cybersecurity for the past 4 years. I hold the Google Cybersecurity Certificate, actively solve labs on TryHackMe and Hack The Box, and I’m currently enrolled in TryHackMe AI1 before moving toward eJPT and CPTS/OSCP-level practice.
4+Years learning cybersecurity
Top 8%TryHackMe ranking
AI1Currently enrolled
About
Biotech background. Hacker discipline.
I’m combining a scientific education with practical cybersecurity learning. My focus is ethical hacking, AI security, threat analysis, secure systems, and writing clear technical reports.
Security Learner
Learning cybersecurity for 4 years through labs, notes, certifications, writeups, practical research, and continuous practice.
Web SecurityLinuxRecon
AI Security Focus
Currently focused on prompt injection, RAG security, model supply chain risk, AI threat modelling, and LLM abuse prevention.
Prompt InjectionRAGLLM Risk
Skill Stack
Security areas I’m actively sharpening.
My learning is practical-first: understand the concept, test it in a legal lab, document the result, then improve the methodology.
Cybersecurity Fundamentals
Networking, Linux, security concepts, risk thinking, basic SOC knowledge, and defensive foundations.
Web Security
Recon, authentication flaws, access control issues, common OWASP-style vulnerabilities, and lab exploitation.
AI Security
Prompt injection, indirect injection, RAG poisoning, model supply chain security, and safe AI system design.
CTF & Labs
TryHackMe and Hack The Box practice focused on enumeration, exploitation, privilege escalation, and reporting.
Security Reporting
Writing clear findings with impact, steps to reproduce, evidence, and practical remediation.
Certification Prep
Google Cybersecurity Certificate completed; currently moving through AI1, then eJPT, CPTS, and OSCP-level goals.
Hands-on Labs
Practice is the proof.
I use labs to build real methodology: enumerate, verify, exploit only in scope, document, and learn from every mistake.
Platforms I practice on
I’ve solved many labs across TryHackMe and Hack The Box. The goal is not only flags — it’s developing calm enumeration, practical exploitation logic, and clean reporting habits.
TryHackMeTop 8%
Hack The BoxActive
AI SecurityIn progress
Recon
Service discovery, content discovery, notes, and attack surface mapping.
Exploitation
Lab-based validation of vulnerabilities while staying inside legal practice environments.
Privilege Escalation
Linux and Windows practice focused on misconfigurations, enumeration, and escalation paths.
Projects
Portfolio ideas built around security value.
Projects that show practical thinking: detect risk, explain impact, and build safer systems.
NeuroShield-RAG
AI SecurityA defensive AI security scanner concept for detecting prompt injection, RAG poisoning, sensitive data exposure, risky tool-use instructions, and OWASP LLM-style risks before documents enter a RAG pipeline.
Prompt InjectionRAG SecurityOWASP LLM
Security Lab Writeups
MethodologyA structured collection of lab notes and ethical writeups focused on enumeration flow, exploit reasoning, privilege escalation learning, and remediation-first explanations.
TryHackMeHack The BoxReporting
Roadmap
Certification path I’m working toward.
A focused path from fundamentals to practical penetration testing and AI security specialization.
AI1
Current focus: TryHackMe AI Security
Learning AI security fundamentals, prompt security, RAG risks, model supply chain issues, and practical AI system threats.
01
Google Cybersecurity Certificate
Completed foundational cybersecurity training and built a structured base.
02
TryHackMe AI1
Currently enrolled and focused on AI security, prompt injection, RAG, and LLM threat models.
03
eJPT
Next target for practical junior penetration testing fundamentals.
04
CPTS / OSCP
Long-term goal: advanced practical penetration testing skill and professional methodology.
Contact
Let’s connect.
I’m open to learning opportunities, security discussions, collaborations, internships, and beginner-friendly cybersecurity projects.
Visible contact details are intentionally hidden. Use the buttons to open the right platform.