How AI Is Changing Software Testing and VAPT
How AI is moving from test assistance toward agentic testing, changing test generation, automation, defect analysis, security testing, and the role of the tester.
Sneakywarwolf
$ whoami
Nirmal Chakraborty
Security Engineer · Penetration Tester · Risk Advisor
I secure web applications, APIs, mobile applications, and networks by identifying vulnerabilities before attackers can exploit them. I also lead security teams, drive technical delivery, advise on cybersecurity and risk, and help organizations strengthen their security posture through effective people, processes, and technology.
Technical Leadership & Team ManagementClient & Stakeholder ManagementCybersecurity AutomationVulnerability & Threat AssessmentPenetration TestingNetwork VAPT & Vulnerability AssessmentsCybersecurity Risk Assessment & Advisory
Featured Projects
ReconCraft
Modular reconnaissance and vulnerability-scanning framework with a PyQt5 GUI. Plugin-based tool integration, parallel scanning, custom scan profiles, dashboards and an interactive CVSS v3.1 calculator.
PinSlayer
Frida-based SSL/TLS pinning bypass framework for Android. Hooks TrustManager, HostnameVerifier and related trust mechanisms at runtime to enable HTTPS interception without repackaging the APK.
SFAC
Subdomain Finder & Accessibility Checker. Enumerates subdomains via Sublist3r, checks which are live, captures headless screenshots and exports results to CSV.
Latest Research & Write-ups
Task-Model-Tool Alignment: Choosing the Right AI Architecture
Why AI efficiency depends on task-model-tool alignment and total token cost rather than simply adding more models, tools, and skills.
The Environmental Consequences of the AI Boom
The environmental consequences of rapidly growing AI workloads, including electricity demand, water consumption, carbon emissions, hardware manufacturing, and the efficiency-versus-scale paradox.
Token-Efficient AI- Headroom, Claude-Mem, and Context Engineering
How context compression, progressive disclosure, persistent memory, subagents, dynamic tool loading, and efficient context design reduce unnecessary AI computation and context consumption.
AI Skills, Plugins, and the Agent Stack- How the Right Combination Gets Work Done
How AI skills, plugins, MCP, subagents, hooks, memory, and project instructions work together to turn a general-purpose model into a practical execution system.
Response Manipulation: Bypassing Client-Side Trust Decisions
How response manipulation works in web and mobile testing, why it succeeds, how to test for it with Burp Suite, how to rate it, and how to fix the root cause on the server.
Cybersecurity is Important
Why security testing and compliance matter: types of security testing, PCI DSS and PCI SSF, and the OWASP Top 10.
Avengers Blog Writeup-TryHackMe
Walkthrough of the TryHackMe Avengers Blog room: cookie and HTTP header inspection, FTP enumeration, directory brute-forcing, SQL injection login bypass and command injection.