Cyber Security Researcher specializing in Red Team Operations, Threat Intelligence and Malware Analysis, building open-source security tooling and sharing hands-on offensive & defensive research at ImranTheExploitHunter.
Imran Chowdhury is a Cyber Security Researcher and the founder of ImranTheExploitHunter, a research initiative dedicated to exploring offensive security techniques, threat intelligence, and open-source tooling for the security community.
His work spans Red Team operations, Active Directory security, malware analysis and detection engineering, with an emphasis on turning hands-on lab research into practical, publicly shared knowledge through write-ups, tools and video walkthroughs.
Beyond hands-on testing, Imran maintains a set of open-source security projects on GitHub and publishes research breakdowns on Medium, aiming to make offensive security concepts more accessible to practitioners entering the field.
Core areas of hands-on expertise across offensive and defensive security disciplines.
Adversary simulation, lateral movement, privilege escalation.
Static & dynamic analysis, IOC extraction, FLARE VM / REMnux.
Threat hunting, attacker behavior analysis, honeypot data.
Manual testing, business logic flaws, OWASP methodology.
Vulnerability assessment, pivoting, network hardening.
Incident response, evidence handling, artifact analysis.
Wazuh, Suricata, Zeek — SIEM monitoring & alert tuning.
Cloud misconfiguration review and hardening fundamentals.
Industry certifications validating hands-on offensive security skill — each badge links to its public verification page. More being added as they're earned.
Additional certifications in progress
Seven pillars of security research that shape every project, write-up and lab.
Selected repositories from the ImranTheExploitHunter GitHub. Full source, docs and write-ups are linked on each project.
Educational research on Windows User Account Control (UAC): security architecture, common attack surfaces, logging, monitoring, and defensive detection techniques.
View on GitHub →Research on defeating Windows User Account Control by abusing the built-in Windows AutoElevate mechanism.
View on GitHub →Reference project around LaZagne, the open-source application used to retrieve credentials stored locally on a machine, for authorized security testing.
View on GitHub →An automated identity rotation engine built for ethical hacking labs — anti-DNS leak protection, dynamic proxy chaining, and live MAC/IP rotation.
View on GitHub →An Active Directory enterprise username permutation engine, built to support AD security research and lab environments.
View on GitHub →Browse the complete, continuously updated list of open-source tools, labs and research repositories.
See All on GitHub →Research breakdowns and technical write-ups published on Medium.
Full articles are published and kept up to date on the Medium profile — new posts appear there first.
Read on Medium →Formal publications, CVEs and whitepapers will be listed here as they're released.
Key milestones in offensive security research and open-source contribution.
Started the research initiative to document hands-on offensive & defensive security work publicly.
Completed the Offensive Security Certified Professional certification, validating hands-on penetration testing skill.
Released research-driven tools including UAC bypass research, an identity rotation engine, and an AD username permutation generator.
Continuing to publish write-ups on Medium and walkthroughs on YouTube, alongside active lab research.
Live activity pulled from GitHub — the badge below updates automatically, so it never goes stale.
Repository count confirmed from the live GitHub profile. Follower and star counts are intentionally left off as static numbers here — the badge above pulls them live so this section is never wrong.
Reach out or follow along across every active channel.
Imran Chowdhury is a Cyber Security Researcher and the Founder of ImranTheExploitHunter, focused on Red Team Operations, Threat Intelligence, Malware Analysis and Open Source Security Projects.
OSCP (Offensive Security Certified Professional) and CDRP, with more certifications being added over time.
Red Team, Threat Intelligence, Malware Analysis, Web Security, Network Security, Cloud Security and Digital Forensics.
GitHub, Medium and YouTube for full research and walkthroughs, with updates shared on LinkedIn, X and Facebook.
