Bikash Sarraf Photo

Hello👋, I'm Bikash Sarraf (Spydomain)

Cybersecurity & Ethical Hacking Enthusiast

  • 📍Kathmandu, Nepal
  • 💻Softwarica College of IT and E-Commerce, Gyaneshwor, Kathmandu Nepal
  • 🎓CyberSecurity & Ethical Hacking Student

I am passionate about learning new things in technology, especially cybersecurity, ethical hacking, and website penetration testing. I enjoy tackling challenges and continuously developing my skills.

10 Projects
16 Certifications
10 Achievements
About Me View My Work Download CV
Spydomain@NativeShell ~ NOT STARTED

🛡️ SPYDOMAIN SECURE SHELL

Press Enter or Click to boot...

About Me

I am a passionate cybersecurity student with a strong interest in ethical hacking and web security. My journey in technology started with a curiosity about how things work, which led me to pursue a career in cybersecurity.

When I'm not studying or working on projects, I enjoy participating in CTF challenges, learning about new security vulnerabilities, and contributing to open-source security tools.

My goal is to become a skilled website penetration tester and help make the digital world a safer place.

Focus Areas

Penetration Testing, OSINT, Web Security, Bug Bounty

CTF Player

Captain and active member of Team Visored; former Blue Lock Eleven member

Open Source

Contributing to security tools & sharing knowledge

Education

2024 — Present

Bachelor's in Cyber Security and Ethical Hacking

Currently pursuing at Softwarica College of IT & E-Commerce, Gyaneshwor, Kathmandu Nepal.

2022 — 2024

+2 Science (Biology) - 3.08 GPA

Xavier International College, Kalopul, Kathmandu Nepal

2022

SEE - 3.10 GPA

Shree Sharaswasti English Boarding School, Lipanimal-3, Bara Nepal

Skills

Languages & Frameworks

HTML / CSS75%
Python70%
JavaScript / Node.js65%
React.js55%
C50%
Bash Scripting65%
MySQL / PHP45%

Hacking & Security

OSINT70%
Penetration Testing60%
Web Application Security65%
Network Security55%
Bug Bounty45%
Session Hijacking50%

Experience

Currently no work experience

Projects

Keylogger

Python

A Python-based keylogger project for educational purposes.

GitHub Repository

Bike Rental Nepal

Node.js React

Full-stack bike rental platform built with Node.js and React.js

Frontend Backend

CVE-2023-22809 Exploits

Python CVE

Automated Python exploits for CVE-2023-22809 vulnerability

GitHub Repository

ClipboardAI

Bash AI

Bash script that sends copied text to LLAMA (OLAMA) and pop ups instant answer completely offline.

GitHub Repository

NotesVista

Node.js React

Modern note-taking application built with MERN stack

Live Demo

NebullaComms

Node.js React

Modern communication application built with MERN stack supporting chats, audio & video calls, and more.

Live Demo

FGE Identification Test Platform

Flutter

Modern Test Taking app for French Army built with Flutter

Live Demo

CVE-2021-22555 PoC

Python CVE

Proof of Concept for CVE-2021-22555 vulnerability.

GitHub Repository

CVE-2017-1000112 PoC

Python CVE

Proof of Concept for CVE-2017-1000112 vulnerability.

GitHub Repository

CVE-2022-0435 PoC

Python CVE

Proof of Concept for CVE-2022-0435 vulnerability.

GitHub Repository

Achievements & CTF

2nd Place — Pentester Nepal CTF (2026)

Secured 2nd place in Pentester Nepal CTF 2026 competing as part of team Visored.

View Announcement View Certificate

8th Place — HackAstra Finale CTF

Achieved 8th rank in the HackAstra Finale CTF organized by Herald College.

View Announcement

9th Place — Trinity Technology Solo CTF

Secured 9th place in Trinity Technology Solo CTF competition.

View Announcement

18th Place — HackAstra CTF

Placed 18th in HackAstra CTF prelims and qualified for the grand finals.

View Certificate

69th Place — Midnight CTF

Ranked 69th place in the international Midnight CTF competition.

View Certificate

Team Visored Captain & Active Member

Captain and active member of Team Visored, competing in CTF challenges.

Team Website LinkedIn Page

Former Blue Lock Eleven CTF Team Member

Former member of the Blue Lock Eleven CTF team.

Team Website

TryHackMe Progress

Reached the top 1% globally and a 500+ day streak. View the profile for current statistics.

View Profile

HackerOne Bug Bounty Program

Identified and submitted valid security vulnerability on HackerOne bug bounty program (marked duplicate).

View Post

TryHackMe Room Creator

Created custom cybersecurity lab challenge "Ganheist" on TryHackMe.

View Lab

Certifications

TryHackMe Pre-Security

Completed comprehensive cybersecurity fundamentals training

View Certificate

Cyber Security 101

Fundamentals of cybersecurity principles and practices

View Certificate

Advent of Cyber 2022

24 days of cybersecurity challenges and learning

View Certificate

Advent of Cyber 2023

Advanced cybersecurity challenges and techniques

View Certificate

Advent of Cyber 2024

Latest cybersecurity trends and offensive techniques

View Certificate

Certified Cybersecurity Educator Professional (CCEP)

The Global Standard for Cybersecurity Education and Expertise

View Certificate

Cisco Ethical Hacker

Certified in ethical hacking methodologies and tools

View Badge

Google Cybersecurity Professional

The Pathway to Industry-Ready Cybersecurity Skills

View Certificate

CompTIA PenTest+ (PT0-002)

CompTIA PenTest+ (PT0-002) course completed from Coursera

View Certificate

Certified API Security Analyst

Broad API security expertise

View Certificate

APIsec Certified Practitioner

Practical API security expertise and 5-course certification

View Certificate

Certified Red Team Operations Management (CRTOM)

Advanced Red Team operations planning and management certification

View Certificate

Certified C++ Practitioner Professional (CCPP)

Demonstrated proficiency in C++ programming and secure software principles

View Certificate

Oracle Cloud Infrastructure 2025 Certified AI Foundations Associate

Certified in Oracle Cloud Infrastructure AI foundational concepts and capabilities

View Certificate

Hack The Box Mini Pro Labs: Mythical

Completed practical red team lab covering Active Directory, AD CS, C2 Operations, MSSQL attacks, and lateral movement.

View Certificate

Hack The Box Mini Pro Labs: Puppet

Completed practical Red Team lab covering Active Directory, Silver C2 operations, DevOps infrastructure exploitation, and lateral movement.

View Certificate

Contact Me