Chirag Savla
Senior Cloud Security Engineer at White Knight Labs
Mumbai, Maharashtra, India
Summary
🤩
RockstarChirag Savla is a Senior Cloud Security Engineer based in Mumbai with around nine years of hands-on experience in offensive and defensive security across Azure, Active Directory, and post-exploitation research. He designs scenario-based labs, trains at professional courses including Black Hat, and has built detection use cases and attack simulations used to harden enterprise environments. A prolific open-source contributor, he authors tools like ProcessInjection and Callidus that demonstrate advanced process injection and evasion techniques, reflecting a deep interest in AV/EDR bypasses and dynamic invocation methods. Previously he led application and infrastructure security programs at organizations such as NSE India, where he combined risk management, secure architecture guidance, and red-team simulations to improve detection posture. Known for turning research into practical training and tooling, he blends rigorous Windows internals expertise with cloud-focused adversary emulation to help teams anticipate real-world threats.
8 years of coding experience
8 years of employment as a software developer
Github Skills (9)
process-injection10
it-security10
ws-api10
csharp10
winapi10
dll-injection10
wp-api10
dotnet-core10
security10
Programming languages (5)
Github contributions (5)
3xpl01tc0d3r/ProcessInjection
Aug 2019 - May 2022
This program is designed to demonstrate various process injection techniques
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:31 commits, 5 PRs, 23 pushes in 2 years 8 months
Contributions summary:Chirag primarily contributed to a project focused on demonstrating process injection techniques, as indicated by the repository's description. Their contributions included the implementation of different process injection methods like vanilla injection, DLL injection, APC Queue injection, and Process Hollowing. Furthermore, the user introduced the use of dynamic invocation, alongside Parent PID Spoofing to evade detection. The focus of this project is clearly around offensive security.
injectiondependency-injectiontechniquesdll-injection
3xpl01tc0d3r/Abusing-MSSQL
Nov 2018 - Aug 2019
Contributions:5 commits, 4 pushes, 1 branch in 8 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.