Cyber Security Researcher specializing in Red Team Operations, Threat Intelligence and Malware Analysis, building open-source security tooling and sharing hands-on offensive & defensive research at ImranTheExploitHunter.
Imran Chowdhury is a Cyber Security Researcher and the founder of ImranTheExploitHunter, a research initiative dedicated to exploring offensive security techniques, threat intelligence, and open-source tooling for the security community.
His work spans Red Team operations, Active Directory security, malware analysis and detection engineering, with an emphasis on turning hands-on lab research into practical, publicly shared knowledge through write-ups, tools and video walkthroughs.
Beyond hands-on testing, Imran maintains a set of open-source security projects on GitHub and publishes research breakdowns on Medium, aiming to make offensive security concepts more accessible to practitioners entering the field.
Core areas of hands-on expertise across offensive and defensive security disciplines.
Adversary simulation, lateral movement, privilege escalation.
Static & dynamic analysis, IOC extraction, FLARE VM / REMnux.
Threat hunting, attacker behavior analysis, honeypot data.
Manual testing, business logic flaws, OWASP methodology.
Vulnerability assessment, pivoting, network hardening.
Incident response, evidence handling, artifact analysis.
Wazuh, Suricata, Zeek — SIEM monitoring & alert tuning.
Cloud misconfiguration review and hardening fundamentals.
Industry certifications validating hands-on offensive security skill — each badge links to its public verification page. More being added as they're earned.
Additional certifications in progress
Seven pillars of security research that shape every project, write-up and lab.
Selected repositories from the ImranTheExploitHunter GitHub. Full source, documentation and research projects are linked on each repository.
Security research PoC for simulated payload execution, C2 telemetry and IOC collection inside an isolated lab environment.
View on GitHub →Educational and authorized security research project containing malware-analysis and Proof-of-Concept automation concepts for red team and defensive research.
View on GitHub →OSCP-style penetration testing practice environment focused on enumeration, methodology, exploitation and proof-based attack chains.
View on GitHub →Active Directory security research focused on graph-based attack path analysis, privilege relationships and Domain Admin attack chains.
View on GitHub →Red team research project exploring Sliver traffic patterns, payload signatures and communication behavior in controlled security testing environments.
View on GitHub →Practical Windows Local Privilege Escalation research collection covering techniques and scripts for authorized penetration testing and red team operations.
View on GitHub →Windows Registry Run persistence research project demonstrating persistence concepts for authorized security research and controlled lab environments.
View on GitHub →Professional multi-format IOC extraction tool designed for SOC analysts and threat hunters to identify, normalize and deduplicate indicators from security artifacts.
View on GitHub →Active Directory enterprise username permutation engine built for AD security research, enumeration workflows and lab environments.
View on GitHub →Automated identity rotation engine for ethical hacking labs, featuring anti-DNS leak protection, dynamic proxy chaining and live MAC/IP rotation.
View on GitHub →Security research reference project around LaZagne and local credential retrieval, intended for authorized security testing and research environments.
View on GitHub →Windows User Account Control research exploring AutoElevate behavior and UAC security boundaries in controlled environments.
View on GitHub →Educational Windows UAC security research covering architecture, attack surfaces, logging, monitoring and defensive detection techniques.
View on GitHub →Browse the complete collection of open-source security tools, penetration testing labs, research projects and cybersecurity experiments from ImranTheExploitHunter.
See All on GitHub →Research breakdowns and technical write-ups published on Medium.
Full articles are published and kept up to date on the Medium profile — new posts appear there first.
Read on Medium →Formal publications, CVEs and whitepapers will be listed here as they're released.
Key milestones in offensive security research and open-source contribution.
Started the research initiative to document hands-on offensive & defensive security work publicly.
Completed the Offensive Security Certified Professional certification, validating hands-on penetration testing skill.
Released research-driven tools including UAC bypass research, an identity rotation engine, and an AD username permutation generator.
Continuing to publish write-ups on Medium and walkthroughs on YouTube, alongside active lab research.
Live activity pulled from GitHub — the badge below updates automatically, so it never goes stale.
Repository count confirmed from the live GitHub profile. Follower and star counts are intentionally left off as static numbers here — the badge above pulls them live so this section is never wrong.
Reach out or follow along across every active channel.
Imran Chowdhury is a Cyber Security Researcher and the Founder of ImranTheExploitHunter, focused on Red Team Operations, Threat Intelligence, Malware Analysis and Open Source Security Projects.
OSCP (Offensive Security Certified Professional) and CDRP, with more certifications being added over time.
Red Team, Threat Intelligence, Malware Analysis, Web Security, Network Security, Cloud Security and Digital Forensics.
GitHub, Medium and YouTube for full research and walkthroughs, with updates shared on LinkedIn, X and Facebook.
