01 / RECON
ENUMO Toolkit
An automated reconnaissance toolkit designed to organise subdomain discovery, service identification, fingerprinting and related assessment workflows.
Reconnaissance · Automation
Independent security research & engineering
Aryan
Aryan
Pareek.
Cybersecurity Researcher · Ethical Hacker · TheCyberAryan
I work across offensive security and digital defence, with an interest in understanding how systems fail, validating security weaknesses responsibly, and turning technical findings into clear, actionable improvements.
THECYBERARYAN
Security. Precision. Resilience.
Areas of focus
Application Security
Penetration Testing
Security Research
Digital Forensics
Threat Detection
A little about me
Curiosity is the
Curiosity is the
starting point.
Understanding the problem matters as much as finding it. My focus is on evidence, context and practical security outcomes.
I'm Aryan Pareek, also known as TheCyberAryan. My work and learning are centred on cybersecurity, ethical hacking, vulnerability research and the practical security of digital systems.
I enjoy examining applications and infrastructure from an adversarial perspective, documenting what can go wrong, and communicating findings in a way that helps technical teams understand risk and prioritise remediation.
This website brings together selected projects, research, professional background and educational writing. It is intended to be a transparent record of work—not a collection of unsupported claims.
Selected work
Projects & tools.
A selection of security-focused projects and experiments. Individual project pages and repositories can be linked here as they are prepared.
02 / APPSEC
Xss-Master
A project focused on helping assess cross-site scripting exposure through structured input analysis and testing workflows.
Web security · XSS testing03 / WEB
Traverser
A path-traversal testing project intended to help identify weaknesses in how applications handle file paths and resource access.
Application security · Testing04 / ML
Fraud Detection System
A machine-learning project exploring the detection of phishing and fraudulent websites using website-related indicators.
Machine learning · Detection05 / AD
Impacket Automation
Automation experiments around Active Directory security assessment workflows and the identification of configuration weaknesses.
Active Directory · Automation06 / NOTES
Research & write-ups
Technical notes and educational articles explaining security concepts, assessment methodology and responsible vulnerability disclosure.
Knowledge sharing · Research
Technical capabilities
Areas of expertise.
A practical mix of assessment, investigation, engineering and communication skills.
Security work rarely sits inside one tool or one discipline. These are the areas represented in my current technical practice and project work.
Offensive security
Defensive security
Forensics & investigation
Engineering & automation
External recognition
Recognition.
External features and acknowledgements are listed here when a source can be verified.
External references
Source-verified recognition.
Features and acknowledgements will include their original source and context.
No verified features listed
Add a publication or acknowledgement here when a public source is available.
Professional development
Certifications.
Credentials should be easy to verify. Certificate links or credential IDs can be added to each item.
Certified Ethical Hacker (CEH)EC-Council · Credential details can be linked
Certified Penetration Testing Specialist (CPENT)EC-Council · Credential details can be linked
Start a conversation
Have a security question
Have a security question
or a project in mind?
For professional enquiries, research discussions, responsible disclosure coordination or collaboration, send me an email.