QR Code
1 0 0 0 0 0 1 1 1 0 1 1 1 0 1 1 1 0 1 0 0 1 1 0 1 1 1 1 1 1 0 1 0 0 1 1 1 0 1 1 1 0 1 1 0 0 1 0 1 1 0 1 0 1 1 1 1 1 0 1 1 1 1 1 1 0 0 1 0 0 1 1 0 1 1 1 0 1 1 0 1 0 0 1 1 1 0 0 0 0 1 1 1 0 0 0 1 1 1 1 0 1 0 1 1

HacksonAloysis - Security Engineer

1 0 0 0 1 0 0 1 1 0 1 1 1 1 1 0 1 0 1 0 0 1 1 0 1 0 0 0 1 1 0 1 0 0 1 1 1 0 1 1 1 0 1 1 0 0 1 1 1 1 1 1 0 0 1 1 1 0 1 1 0 0 1 1 1 0 1 1 1 1 1 1 1 0 1 0 1 1 1 1 0 0 1 0 1 0 1 0 1 1 1 1 1 0 0 0 0 1 1 1 1 1 0 0 1

About

I'm a security engineer who hunts vulnerabilities, competes in CTFs, and builds tools that make systems harder to break.

I started with curiosity, dived into web security and network exploitation, competed in international CTF events, secured real-world systems, earned recognition from the Latvian Government, won a few awards, and keep on learning.

Awards

  • TryHackMe (WOF x 1) (Honors x 1)
  • CII (ITC x 2)
  • UiPath SDC 2026
  • 2025 UST GenCys CTF
    Finalist & Special Winner
  • 2026 IITM ISEA-ISAP CTF Finalist/Top 5 Teams
  • YUKTI CTF (Finalist)
  • Latvian Government LOA 2025(Letter Of Appreciation)
  • Secured Latvijas Banka
  • UiPath Student Developer
    Champion 2026
1 0 0 0 1 0 0 1 1 0 1 1 1 1 1 0 1 0 1 0 0 1 1 0 1 0 0 0 1 1 0 1 0 0 1 1 1 0 1 1 1 0 1 1 0 0 1 1 1 1 1 1 0 0 1 1 1 0 1 1 0 0 1 1 1 0 1 1 1 1 1 1 1 0 1 0 1 1 1 1 0 0 1 0 1 0 1 0 1 1 1 1 1 0 0 0 0 1 1 1 1 1 0 0 1

Selected Work 04 Reports 2025—2026

Work

Four systems built to detect, explain, and defend. Each report is a problem, an approach, and a result.

Kernel · Detection · Research

BYOVD

Self-protecting driver attestation.

Research Case 01 / 04 · 2025
Plate 01Ring 0 / Ring 3 attestation path
Case notes01 / 04
Problem
Attackers load signed vulnerable drivers to reach Ring 0 and blind the EDR watching them.
Approach
A WDM + Minifilter driver intercepts image loads and streams them over \ByovdPort to a C# engine. ObRegisterCallbacks strips termination and VM-write rights from handles to the service.
Result
Sub-millisecond load telemetry; a known-bad driver flagged on the dashboard; Task Manager, taskkill /F, and Process Explorer all denied. Documented in a co-authored IEEE-format paper.
3/3 Termination paths denied
  • C
  • WDM
  • Minifilter
  • C# / .NET
  • SHA-256
  • LOLDrivers
View repository

Detection · Backend · Healthcare

My Onsite

One incident, one answer.

System Case 02 / 04 · 2026
Plate 02Four sources, one decision
Case notes02 / 04
Problem
Four EDR platforms describe the same endpoint differently. Analysts get conflicting alerts and no way to replay the call.
Approach
Deterministic FastAPI + MySQL reconciliation: 10-minute windows, four ordered rules, append-only decision revisions, and a public audit trace. ThreatForge applies the same thesis to fraud and sanctions signals — credibility, fusion, explainable risk.
Result
One explainable decision per conflict, replayed from the same event set. Five EDR fixtures pass; the fraud engine held 70 requests at zero errors, ~38 ms median against a 2 s budget.
70/0 Requests / errors
  • Python
  • FastAPI
  • MySQL 8
  • REST
  • JSONL audit
View repository

Applied AI · Product · Bilingual

Al Jazira

A bank assistant with a firewall.

POC Case 03 / 04 · 2026
Plate 03Redaction before inference
Case notes03 / 04
Problem
A bilingual bank assistant has to answer in English and Arabic, stay inside banking, and never let a card number reach the model.
Approach
A FastAPI + LangChain agent with a PII/PCI firewall before inference, a scope classifier, seven tools over masked SQLite data, BM25 retrieval with citations, and an audit log. Provider-swappable across Groq, Qwen, Grok, and Ollama.
Result
Tender-ready POC with EN/AR RTL parity. Sensitive data is stripped before any LLM call; the demo database only ever holds masked numbers.
7 Tools, one audit
  • Python
  • FastAPI
  • LangChain
  • SQLite
  • BM25
  • RTL

Responsible disclosure · 2025

The Letter

A disclosure, a fix, a letter.

Disclosure Case 04 / 04 · 2025
Original Letter / 1 August 2025Open full-size PDF
Case notes04 / 04
Problem
A vulnerability at a Latvian financial institution.
Approach
Validated the issue and reported it through CERT.LV. The finding was remediated and the system was secured.
Result
Letter of Appreciation from the Latvian Government, 2025. The vulnerability vector is withheld under responsible disclosure.
2025 Coordinated disclosure
  • Web security
  • Coordinated disclosure
  • CERT.LV

Beyond the reports

Field Notes

CTFs, conferences, certificates, and the rooms in between.

Open the archive

A R C H

Generous Branding
#3vva-0000/34
Hunter Farmer
#dbq8-0001/34
Generous Branding
#ny2d-0002/34
Nod Coding Bootcamp
#87va-0003/34
Rudl und Schwarm
#t44q-0004/34
24/7 Artists
#3g5d-0005/34
Nod Coding Bootcamp
#wksl-0006/34
Duten
#0qh5-0007/34
Vanguart
#y15t-0008/34
Generous Branding
#a24d-0009/34
Nod Coding Bootcamp
#1j4c-0010/34
Pantoufle Hotel
#m2my-0011/34
Vanguart
#d6fu-0012/34
24/7 Artists
#oqga-0013/34
Rudl und Schwarm
#sxvc-0014/34
Vanguart
#wfll-0015/34
CodePen
#5w0n-0016/34
Duten
#emwy-0017/34
24/7 Artists
#cul2-0018/34
Duten
#0ngv-0019/34
Vanguart
#kqon-0020/34
24/7 Artists
#frnh-0021/34
GenCys Image
#z0bj-0022/34
Gencyc Group Pic
#s8nw-0023/34
Gencyc ID Pic
#yhcw-0024/34
Gencyc Pic
#ppxm-0025/34
Gencyc Rank Pic
#ffo8-0026/34
Gencyc Solo Pic
#mxe3-0027/34
Gencyc Solo 1
#suav-0028/34
Gencyc Solo 2
#7vol-0029/34
Gencyc Solo 3
#i1er-0030/34
Gencyc Solo 4
#kive-0031/34
Gencys Group Pic
#t7cu-0032/34
Gencys ID 1 Pic
#508u-0033/34

Journey

Chronicle 14 entries 2023 — 2026

Entry 01 / 14 log:0x01
Scroll to advance Upcoming Project Aegis

01 / 14

1 0 0 0 1 0 0 1 1 0 1 1 1 1 1 0 1 0 1 0 0 1 1 0 1 0 0 0 1 1 0 1 0 0 1 1 1 0 1 1 1 0 1 1 0 0 1 1 1 1 1 1 0 0 1 1 1 0 1 1 0 0 1 1 1 0 1 1 1 1 1 1 1 0 1 0 1 1 1 1 0 0 1 0 1 0 1 0 1 1 1 1 1 0 0 0 0 1 1 1 1 1 0 0 1
Group photo of event attendees standing outside a venue.
Event group, outdoor venue
A person in a GenCys shirt looks out over the ocean at sunset.
GenCys sunset
Close-up of an event badge and lanyard held in one hand.
Event badge
Event participants stand together on a stage beneath a GenCys display.
GenCys stage
A competition leaderboard is shown on a computer monitor.
Competition leaderboard
Large group photo of attendees at a technology event.
Event group photo
Three participants pose on stage at a GenCys event.
GenCys stage recognition
Certificates and award items are arranged on a table.
Certificates and awards
Stage at the CII Chennai Zone Annual Summit 2025.
CII Chennai Zone Summit 2025
A person stands beside a blue event display.
Event display
Three attendees pose in front of a DX-EDGE event backdrop.
DX-EDGE event team
DX-EDGE certificate recognizing Karthik Raja.
DX-EDGE certificate
A person stands beside an illuminated Tamil sign.
Illuminated Tamil sign
Group photo at a technology event display.
Technology event team
An exhibition display with project materials and awards.
Project exhibition
A multi-storey building and event entrance at night.
Evening venue
Coding
my way
since
2023
Coding
my way
since
2023
GO
L L L L e e e e t' t' t' t' s s s s
R R R R o o o o c c c c k k k k
karthikraja.connect@gmail.com