Skip to content
View Varunpoojari's full-sized avatar
πŸ¦…
πŸ¦…

Block or report Varunpoojari

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Varunpoojari/README.md

Varun Poojari

πŸ‘‹ Hi, I'm Varun

I'm a cybersecurity graduate based in Dublin, Ireland, working where security operations meets AI security.

  • πŸ”­ Currently an AI Security Intern at Rakfort, testing LLM applications against the OWASP LLM Top 10 and mapping risks to MITRE ATLAS
  • πŸ€– Contributor to Microsoft PyRIT: added a loader that brings Meta's CyberSecEval attack benchmark into PyRIT (merged)
  • πŸ›‘οΈ Contributed a macOS detection rule to SigmaHQ, the open-source detection rule standard
  • πŸŽ“ MSc Cyber Security, National College of Ireland Β· BTech CSE (Cyber Security & Forensics), MIT-WPU
  • 🎀 Speaker at DevConf.IN 2025 (Red Hat) Β· Published at Springer ICACIS 2024
  • πŸ“š Currently studying for eJPT and CompTIA Security+
  • πŸ’Ό Open to Graduate / SOC Analyst / Detection Engineering roles in Ireland Β· Stamp 1G (full work rights to Oct 2028)

πŸ’Ό Experience

AI Security Intern Β· Rakfort, Dublin Β· Sep 2026 – Present
Assessing LLM apps for prompt injection, data leakage and insecure agent/webhook integrations; building Python automation for LLM-assisted alert triage.

Cyber Security Intern Β· Aether Shield Technologies, Pune Β· Jul 2024 – Jan 2025
Led a 10-person team building a smart-contract auditing tool that integrates 6 open-source frameworks (+20% delivery speed); ran security awareness workshops.

πŸš€ Featured Projects

Project Description Stack
Pentest Suite Β· demo Multi-AI penetration testing framework with 12 modules (XSS, SQLi, SSRF, RCE) and a 0–100 risk score Next.js, TypeScript, LLMs
Malware Analysis Lab Static analysis toolkit for 50+ file types with YARA rules and hashing (95% detection accuracy) Python, YARA
Adaptive AI Honeypot ML-driven honeypot that classifies 100+ attack events in real time Python, ML, Docker
Network IDS (ML) Machine-learning based network intrusion detection Python, ML
AI Phishing Detector Detects phishing emails and URLs using ML Python, ML
Security Log Analyzer Parses security logs and flags suspicious activity Python

🌍 Open Source

Repository Contribution Status
microsoft/PyRIT #3028: loader for the MITRE benchmark of Meta's CyberSecEval (1,000 prompts across ten ATT&CK categories, 27 tests)
SigmaHQ/sigma #6362: detection rule for TCC permission resets via tccutil on macOS (ATT&CK T1548.006)
secfoo-com/secfoo 4 PRs: Codex CLI agent adapter, Codex token cost tracking, Claude adapter hardening, date validation
paralax/awesome-honeypots #172: added Adaptive AI Honeypot System to the list

πŸ› οΈ Tech Stack

Languages & Platforms

Security Tools

Splunk IBM QRadar Elastic Sysmon Suricata Sigma Burp Suite Metasploit Nmap Nessus Wireshark

Frameworks: MITRE ATT&CK Β· MITRE ATLAS Β· OWASP LLM Top 10 Β· NIST CSF Β· ISO/IEC 27001:2022 Β· CIS Controls Β· STRIDE

πŸ“œ Certifications

CEH ISO 27001 Google EC-Council eJPT Security+

πŸ“Š GitHub Stats

GitHub streak

Pinned Loading

  1. Malware_Analysis_Lab Malware_Analysis_Lab Public

    A Python-based malware analysis toolkit for static analysis of suspicious files.

    Python

  2. Adaptive_AI_Honeypot_System Adaptive_AI_Honeypot_System Public

    An adaptive AI honeypot system with attacker behavioral profiling and reinforcement learning capabilities

    Python 6 1

  3. Network-Intrusion-Detection-System-using-Machine-Learning Network-Intrusion-Detection-System-using-Machine-Learning Public

    Python 1

  4. AI-powered-phishing-detector AI-powered-phishing-detector Public

    An AI-powered tool to detect potential phishing attempts in emails

    Python

  5. Security-log-analyzer Security-log-analyzer Public

    A Python-based security log analyzer that detects anomalies in security logs

    Python

  6. pentest-suite pentest-suite Public

    Multi-AI penetration testing framework (OpenAI, Grok, Claude, Ollama) automating XSS, SQLi, SSRF and RCE discovery with 0–100 risk scoring.

    TypeScript