Saood Nasir Sangle

Flight Report Automation Pipeline — Aviation Oasis

I built an automation system using self-hosted n8n to process and verify text logs from pilots automatically, saving hours of manual data entry.

How the system works:

• Ingestion: An IMAP connector monitors the email inbox for new pilot reports and sends the unstructured text to an AI model via the OpenRouter API to extract key values into clean JSON data.
• Security & Tunneling: Used Cloudflare Tunnels to safely expose the local webhooks to the internet without opening inbound router ports on the network.
• Human-in-the-Loop Review: The system sends the extracted JSON to an interactive Telegram message. The manager can approve, edit data inline, or reject the report straight from their phone.
• Storage & Feedback: Approved data runs through a JavaScript cleaning step and writes directly to the disk, followed by an automatic HTML update email sent back to the pilot.

Analyzing WAF Resilience Against Obfuscated Attack Payloads

For my master's dissertation, I set up a local testing lab to evaluate how effectively ModSecurity v3 and the OWASP Core Rule Set (CRS) 3.3.7 block different modified attack payloads in front of the Damn Vulnerable Web Application (DVWA).

Experimental Test Matrix & Results:

Key Findings from the Research:

• SQLi Protection: The grammar-aware libinjection rule (#942100) effectively blocks SQL tautologies at base levels, even when comments are used to break standard text filters.
• XSS Sensitivity: Reflected XSS rules are intentionally deferred to Paranoia Level 3+ to avoid causing false alarms on normal business web traffic.
• Normalization Timing: Double-encoded inputs like %257C bypass mid-tier settings because the character is only fully revealed after the second decoding pass, changing how its anomaly score builds up.

MSc in Cyber Security

Rigorous, hands-on master's level development within an official Academic Centre of Excellence for Cyber Security Research. Core module coursework and engineering competencies include:

• Secure Systems and Applications: Analyzed low-level memory corruption flaws (buffer overflows), stack smashing mechanics, and Linux host persistence rootkits; implemented granular access frameworks (DAC/MAC/RBAC) and audited web inputs for XSS and SQL Injection vulnerabilities.
• Cryptography: Dissected symmetric/asymmetric algorithms (AES, RSA, ElGamal) and message verification structures (HMAC, SHA family); engineered public-key infrastructure (PKI) trust controls, handled digital signatures, and executed Diffie-Hellman key exchanges.
• Architectural Thinking for Security: Designed multi-tier distributed application topologies and zero-trust micro-segmentation perimeters; performed proactive system-wide threat modeling using the STRIDE framework across technical trust boundaries.
• Digital Forensics: Mastered forensic acquisition pipelines for bit-stream disk imaging and volatile memory (RAM) extraction; performed hexadecimal file carving to reclaim deleted space and parsed Windows Registry hives to map incident timelines.
• Network Security: Deconstructed flaws in the TCP/IP stack to defend against packet spoofing and session hijacking; engineered boundary defense tiers using stateful firewalls, application proxies, IDS/IPS filters, and IPsec/TLS VPN tunnels.
• Information Security Management: Conducted quantitative and qualitative asset risk modeling to build business mitigation matrices; aligned engineering controls under ISO/IEC 27001 and NIST frameworks, and designed disaster recovery blueprints.
• Cybercrime and Cybersecurity: Profiled the operational tactics and lifecycle execution of advanced persistent threats (APTs) and botnet command-and-control (C2) infrastructures; analyzed transnational jurisdictions and human social engineering paths.
• Ethical Hacking and Penetration Testing: Conducted structured perimeter bypass testing across Linux/Windows network infrastructure nodes and web environments (OWASP Top 10); performed low-level binary reverse engineering and crafted functional shellcode payloads.

B.E. in Electronics Engineering

Completed a four-year professional engineering degree covering hardware logic circuits, hardware-level programming, network hardware interfaces, and digital logic layouts.

Training: CompTIA Security+ — Course Training Completed