Cybersecurity student · CTF creator

Sparsha
Poudel

Breaking things ethically. Building tools that matter.
Team Lead @ NetanixCTF · Kathmandu, Nepal

View Projects Download CV ↓ Get In Touch GitHub ↗

PERSONAL WORKSPACEAvailable for internships

Sparsha PoudelKathmandu, Nepal

sparsha / workspace

$ cat profile.json

{
"focus": "OSINT, Python, network security",
"education": "Year 3 / Semester 5",
"community": "NetanixCTF",
"status": "open to internships"
}

Kathmandu · Nepal Ethical Hacking & Cybersecurity

status: actively learning focus: OSINT · Web Security · Network Analysis ctf: HackAstra 2026 — Rank #30/455 platform: NetanixCTF Team Lead

About Me

I'm a cybersecurity student and practitioner based in Kathmandu, Nepal, pursuing a BSc in Ethical Hacking & Cybersecurity at Softwarica College. I don't just study security — I build tools, break systems in controlled environments, and help others learn to do the same.

My work spans from designing OSINT trails and recon-heavy CTF challenges at NetanixCTF — a Nepal-based CTF platform — to engineering secure, encrypted applications from scratch. I'm drawn to the intersection of offensive thinking and defensive implementation.

My goal is to grow into a skilled security researcher and penetration tester, contributing to a safer digital Nepal and beyond.

// NetanixCTF — Team Lead & CTF Creator Coordinates the challenge-author team for tournaments. Designs OSINT trails and recon-heavy scenarios. Mentors community members in cybersecurity fundamentals and CTF methodology.

#30 HackAstra 2026
out of 455 teams

4 Security-focused
Projects built

107 Tests written for
SafeChat project

Sem 5 Year 3 · BSc Ethical Hacking
Softwarica College

↗

Let’s build something secure.

// OPEN TO INTERNSHIPS & COLLABORATIONS

Learning through practical work.

I’m a third-year, Semester 5 cybersecurity student interested in opportunities involving Python security tooling, OSINT, network analysis, and CTF challenge creation.

I bring hands-on projects, community leadership at NetanixCTF, and a habit of documenting and testing my work.

Discuss an opportunity →View my CV ↓

Skills & Tools

🛡️

Security Tools

Nmap Wireshark Burp Suite Metasploit Hydra Gobuster Netcat SQLmap Linpeas Hashcat

💻

Programming & Scripting

Python Bash JavaScript SQL Jinja2 HTML/CSS Typer CLI Tkinter SQLite

🌐

Networking

TCP/IP Packet Analysis Port Scanning DNS HTTP/HTTPS OSI Model Network Recon OSINT

🖥️

Operating Systems

Kali Linux Linux/Ubuntu Windows Bash Terminal VirtualBox VMware

🔐

Security Concepts

Encryption (AES/Fernet) HMAC-SHA256 PBKDF2 Hashing Replay Attack Prevention DoS Mitigation Message Integrity CTF Methodology OSINT Techniques Web App Security

⚙️

Dev & Workflow

Git / GitHub Git Flow Unit Testing (pytest) SQLite Rich (CLI UI) Markdown VS Code

Selected projects

Find a project

4 projects

SafeChat Security App Coursework

A Python coursework application exploring authentication, encrypted messaging, message integrity, replay checks, and rate limiting. Built to learn how security controls fit together in a local messaging system.

User authentication with PBKDF2-HMAC-SHA256 password hashing (260,000 iterations + random salt)
Fernet encryption for message protection in the application
HMAC-SHA256 message integrity checks; signature verified on receive
Replay attack prevention using unique nonces + Unix timestamps (5-min window)
DoS rate limiting via token bucket algorithm (30 messages/min per user)
Custom data structures: Doubly Linked List, Hash Map, Adjacency Graph — all from scratch
107 unit and integration tests across 14 test classes
Full tkinter GUI with dark sidebar and multi-user support

Python Fernet/AES HMAC-SHA256 PBKDF2 SQLite Tkinter Pytest Git Flow

// SAFECHAT / CONTROL MAP

How the security controls fit together

01 / INTERFACETkinter client

User interaction

02 / IDENTITYAuthentication

Salted PBKDF2 hashing

03 / MESSAGESProtection checks

Fernet · HMAC · Replay checks

Request control: token-bucket rate limitingValidation: unit and integration tests

Conceptual map of the controls described in this project; not a verified deployment topology.

Explore the SafeChat case study

The problem

Explore how a local messaging application can protect credentials and messages while handling repeated or excessive requests.

Implementation

The project combines salted PBKDF2-HMAC-SHA256 password hashing, Fernet encryption, HMAC-SHA256 integrity checks, nonce and timestamp checks, and token-bucket rate limiting. A Tkinter interface supports multiple users.

Engineering depth

Custom linked-list, hash-map, and graph structures accompany 107 unit and integration tests across 14 test classes, as recorded in this portfolio.

Scope and limitations

This is a coursework project. These controls describe the implementation; they do not establish an independently audited security guarantee. Key management, endpoint trust, and deployment assumptions need review before real-world use.

Explore the source ↗

GitHub ↗

GhostWrite Pentest Tool

A CLI tool built for cybersecurity students and pentesters to capture commands, notes, and flags during active hacking sessions, then export clean Markdown or dark-themed HTML reports with a single command.

Project management system to isolate each HTB box / CTF challenge
Auto-tagging engine: detects nmap, hydra, sudo, linpeas, sqlmap and assigns section + tags automatically
Sections: recon, exploitation, privesc, loot, misc — with timeline view
Export engine using Jinja2 templates — generates clean .md or dark-themed .html writeups
SQLite-backed persistent storage at ~/.ghostwrite/ghostwrite.db
Built with Typer (CLI), Rich (terminal UI), and Jinja2 (templating)

Python Typer Rich Jinja2 SQLite Pytest

Explore the GhostWrite case study

The problem

Commands, findings, and flags can become scattered during CTF and pentesting sessions. GhostWrite organizes them by project and turns the notes into a report.

Implementation

A Typer CLI and Rich terminal interface capture entries in SQLite. Tool-based tagging groups work into reconnaissance, exploitation, privilege escalation, loot, and miscellaneous sections. Jinja2 templates generate Markdown and HTML write-ups.

Workflow

Separate each challenge into a project, capture findings during the session, review the timeline, and export the report.

Scope and limitations

Generated reports reflect the notes captured by the user. Review them for accuracy and sensitive information before sharing.

Explore the source ↗

GitHub ↗

Packet Sniffer with GUI Network Tool Collaborative

A Python-based network packet sniffer with a graphical interface, built as a collaborative Semester 3 project. Captures and displays live network traffic, enabling real-time protocol analysis.

Captures live packets from network interfaces using raw socket programming
GUI layer built in Python for real-time visualization of captured traffic
Collaborative development with Pratik Prasai and Rupak Raj Pandey
Covers TCP/IP protocol analysis, packet parsing, and network fundamentals

Python Raw Sockets TCP/IP GUI Packet Analysis

GitHub ↗

Python Port Scanner Recon Tool

A custom-built port scanner written in Python to understand the mechanics behind tools like Nmap. Scans target hosts for open ports, helping develop foundational knowledge of TCP connections and network reconnaissance.

Socket-based TCP port scanning against target IP ranges
Hands-on learning of how professional recon tools function under the hood
Builds understanding of service enumeration and attack surface mapping

Python Sockets TCP/IP Network Recon

GitHub ↗

// LEARNING IN PRACTICE

A path built through doing.

01
Foundations
TryHackMe Pre Security
Completed May 2025
02
Community
NetanixCTF practice leadership
Ongoing
03
Competition
HackAstra · 30 / 455 teams
May 2026
04
Next chapter
Year 3 · Semester 5
Seeking practical opportunities

Experience

NetanixCTF · CTF Community · Nepal

Team Lead & CTF Creator

// Practice Lead · Ongoing

Serve as Team Lead and Practice Lead at NetanixCTF, coordinating the challenge-author team for competitive tournaments. Design and build OSINT trails and recon-heavy CTF scenarios that test real-world intelligence gathering skills. Mentor community members in cybersecurity fundamentals and CTF problem-solving methodology.

team-lead osint ctf-creator mentorship

TryHackMe

Pre Security Learning Path

// Completed May 5, 2025 · 7h 38min

Completed TryHackMe's structured Pre Security path, covering networking fundamentals, web application basics, Linux essentials, and introductory cybersecurity concepts. Hands-on labs in a guided environment, establishing a solid foundation for offensive security study.

networking linux web security hands-on labs

Softwarica College · Coventry University

BSc Ethical Hacking & Cybersecurity

// Semester 5 of 6 · Year 3

Pursuing a rigorous degree in ethical hacking and cybersecurity. Coursework covers network security, cryptography, penetration testing, programming for security, and system administration. Projects are graded at Coventry University standard.

ethical hacking cryptography pentesting network security

HackAstra 2026 · CTF Season 2026

Competitive CTF Player

// May 29–30, 2026 · Team: neta

Competed in the official online qualifying round of HackAstra 2026, organised by the Ethical HCK Community, Herald College Kathmandu, and Hack@Sec Team. Secured an outstanding rank in a highly competitive field of 455 teams.

ctf competitive team play rank #30/455

Certifications & Education

// Certifications

Pre Security Learning Path

TryHackMe · Certificate THM-SVQUCQZCKX

Completed: May 5, 2025 · 7h 38min · Username: keyboardwarrior

HackAstra CTF 2026 — Certificate of Achievement

Ethical HCK · Herald College Kathmandu · Hack@Sec

May 29–30, 2026 · Rank #30 of 455 Teams · Team: neta

// Education

BSc (Hons) Ethical Hacking & Cybersecurity

Softwarica College of IT & E-Commerce

Affiliated with Coventry University, UK
Kathmandu, Nepal · Expected completion: 2026–2027
Focus: Network Security · Penetration Testing · Cryptography · Secure Programming

CTF & Achievements

🏆

HackAstra CTF 2026

Official Online Qualifying Round · Season 2026

#30 / 455

Competed as Team neta in the HackAstra CTF Qualifiers, organised by Ethical HCK Community under Herald DevCorps, Herald College Kathmandu, and Hack@Sec. Secured 30th place out of 455 competing teams — top 7% globally in the event.

May 29–30, 2026

🛡️

NetanixCTF — Practice Lead

Cybersecurity CTF Community · Nepal

Holding a leadership role on a Nepal-based CTF platform — Hack · Learn · Defend. Responsible for designing recon and OSINT challenge tracks, managing the challenge-author team, and growing the Nepali cybersecurity community through mentorship.

team-lead osint ctf-creator

🔬

TryHackMe — Pre Security Path

keyboardwarrior · Completed May 2025

Completed the structured Pre Security learning path in 7 hours 38 minutes, covering networking, Linux, web fundamentals, and core security concepts through hands-on labs. Certificate: THM-SVQUCQZCKX.

tryhackme.com/p/keyboardwarrior404 ↗

↗