Chandrapal Badshah
Bengaluru, Karnataka, India
Summary
🤩
Rockstar
Top expert inCybersecurity and Penetration Testing Technology
Chandrapal Badshah is an AWS-focused security engineer with 10 years of experience helping Seed to Series B startups eliminate the common, high-impact misconfigurations that lead to breaches. Based in Bengaluru, he quickly converts vague security concerns into practical, prioritized fixes—promising a lockdown of the top 10 startup breach vectors in 14 days. He pairs hands-on DevOps skills with offensive-security insight, having automated deployments and hardened vulnerable VMs in projects like Metasploitable3 and enhanced OSINT tooling in DataSploit. Chandrapal specializes in pragmatic controls—secure IAM, credential vaulting, S3 hardening and automated tests—that let engineering teams keep shipping without adding runway-sinking processes. He’s as comfortable scripting API integrations and test suites as he is advising CTOs and security teams, and his public contributions show a focus on repeatable, test-driven security automation.
10 years of coding experience
Stackoverflow
31reputation
9kreached
0answers
3questions
Github Skills (23)
apim10
json10
osi10
python10
scripting10
testing10
windows10
security10
automation10
api10
http-request10
automations10
chef-client9
chef-solo9
data-extraction9
Programming languages (12)
Github contributions (5)
rapid7/metasploitable3
May 2017 - Apr 2018
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
Role in this project:
DevOps Engineer
DevOps EngineerContributions:133 commits, 24 PRs, 48 pushes in 11 months
Contributions summary:Chandrapal primarily focused on automating and testing the deployment of the Metasploitable3 VM. Their contributions include modifying installation scripts, such as those for Tomcat and Ruby, to ensure the correct versions are installed. Furthermore, the user wrote and updated test scripts, especially for Windows environments, to verify the configuration of firewall rules, user accounts, and the presence of specific files and services related to various applications like JMX, MySQL, and Elasticsearch, effectively ensuring the overall integrity of the VM. They also introduced port checking, enhancing the test suite.
vagrantvmsboxesxivulnerabilities
DataSploit/datasploit
Apr 2017 - Jan 2018
An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:14 commits, 19 PRs, 126 comments in 9 months
Contributions summary:Chandrapal primarily contributed to the back-end functionality of the OSINT framework. Their work focused on integrating and utilizing various APIs, including Twitter, Censys, ZoomEye, and others, to gather and process information. They also incorporated configuration through a vault system for API keys and credentials. The user added new features such as a DNSTrails subdomain extractor, and made security-related changes.
techniquesinformation-gatheringpythonosint-frameworkphone
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.