> whoami

Application Security & Offensive Security

[ LAST SYNC ] June 2026

[ CHANNELS ]

LIVE TOPOLOGY NODE: AD-01

                  .--------.
             .---'          '---.
          .-'     [ 0xAD ]       '-.
        .'                            '.
       /       +----------------+       \
      /        |  AUTH GATEWAY  |        \
     ;         +-------+--------+         ;
     |                 |                  |
     |      .----------+----------.       |
     |      |                     |       |
     |   [ WEB ]               [ API ]    |
     |      |                     |       |
     |      '----------+----------'       |
     |                 |                  |
     ;          +------+-------+          ;
      \         |  TRUST: 00  |          /
       \        |  ACCESS: -- |         /
        '.      +-------------+       .'
          '-.        /_\          .-'
             '---.   \ /    .---'
                  '---+----'
                      |
                 [ HARDENED ]

MONITORING ATTACK SURFACE CTRL // 2026

[ 02 ]

About me

Operator profile // location, tooling, credentials, and selected output.

Location

COLOMBO / LK

Technologies

TOOLCHAIN / ACTIVE

Certifications

VERIFIED / 4

TryHackMe

Cisco

Anthropic

ISC2

Projects

OUTPUT

Ongoing / 2

Framework

PREFERRED

[ OPEN PROFILE ] Know more about me →

[ 03 ]

projects

Security tooling, research, and AI-assisted workflows most relevant to appsec and offensive security roles.

Project / 01

OPEN ↗

Leaflet

Pentest notes and engagement workspace with host tracking, findings, CVSS, credentials, and attack-chain documentation.

Project / 02

OPEN ↗

Phisher

ML-based phishing detection system with a browser extension, FastAPI backend, research workflow, and IEEE ICAC 2025 paper.

[ ALL SYSTEMS ] View projects →

[ 04 ]

Blogs

Selected security articles and CVE breakdowns I wrote for Xentrika Blog.

June 18, 2026 XENTRIKA / CVE INTEL

CVE-2026-20253: Splunk's PostgreSQL Sidecar Hands Out Shells. No Credentials Required

A CVSS 9.8 pre-authentication RCE in Splunk Enterprise's PostgreSQL sidecar service lets any network-reachable attacker chain file-write primitives into full code execution, with active exploitation reported within five days of disclosure.

June 11, 2026 XENTRIKA / CVE INTEL

CVE-2026-10520: Ivanti Sentry's Internal Config API Was Open to the Whole Internet

A perfect 10.0 pre-authenticated OS command injection in Ivanti Sentry lets any unauthenticated attacker execute arbitrary commands as root. Public PoC released June 10, 2026. Patch immediately.

[ ARCHIVE ] View all blogs →

[ 05 ]

Open channel

Have a security problem, engineering role, or project worth discussing? Send a concise brief.