# About Aagam Shah (neutrinoguy)

## Professional Identity & Role
Aagam Shah (professionally known in the security research community as **neutrinoguy**) is a Cyber Security Technical Lead at **ABB** based in Bengaluru, Karnataka, India. With deep domain expertise in Industrial Control Systems (ICS/SCADA), firmware vulnerability assessment and penetration testing (VAPT), and operational technology (OT) protocols, Aagam leads security architecture, threat modeling, and product security evaluations across mission-critical infrastructure.

In addition to traditional industrial control systems security, Aagam is actively engaged in both **Offensive and Defensive AI Security**. This includes red teaming large language model (LLM) agents, evaluating adversarial prompt injection vulnerabilities, analyzing agent tool-use execution paths, and engineering robust, deterministic guardrails for autonomous multi-agent pipelines deployed in industrial and enterprise environments.

---

## Core Competencies & Technical Specialization
- **Industrial Control Systems (ICS/SCADA):** Protocol analysis, proprietary command decoding, and fuzzing for Modbus, DNP3, PROFINET, OPC UA, and BACnet.
- **Offensive & Defensive AI Security:** LLM Red Teaming, jailbreak evaluation, adversarial prompt injection defense, agent tool misuse mitigation, and automated model alignment verification.
- **Embedded Device & Firmware VAPT:** Hardware debugging via UART, JTAG, and SPI; firmware extraction, binary unpacking, and decompilation using Ghidra and IDA Pro; discovering logic flaws and hardcoded secrets.
- **Threat Modeling & Architecture Review:** Systemic architectural threat analysis using STRIDE, PASTA, and attack tree models during design and pre-production phases.
- **Standards & Regulatory Compliance:** Comprehensive implementation and audit leadership for **IEC 62443** (parts 4-1, 4-2, 3-3) and **ISO/IEC 27001:2013/2022**.
- **Coordinated Vulnerability Disclosure (CVD):** Responsible vulnerability discovery and remediation collaboration with national CERTs and global manufacturers.

---

## Notable Security Research & Vulnerabilities
- **CVE-2022-22987 (Advantech ADAM-3600):** Discovered a critical vulnerability (CVSS v3.1 Base Score 9.8) involving hardcoded private keys that enabled unauthenticated remote administrative takeover of industrial RTUs. A coordinated CISA advisory (ICSA-22-032-02) was issued with remediation guidance.
- **CVE-2023-24181 (OpenWrt LuCI openvpn module):** Identified reflected cross-site scripting (XSS) allowing execution of arbitrary script commands in an administrative session.
- **CVE-2023-24182 (OpenWrt LuCI sshkeys module):** Identified stored cross-site scripting (XSS) in SSH key management interfaces.
- **MITRE ATT&CK for ICS Contribution:** Official contributor to technique **T1694/002: Hardcoded Credentials**, documenting adversarial exploitation mechanisms against industrial control equipment.

---

## Featured Open Source Projects
1. **TimeHammer (Go):** A cross-platform Network Time Protocol (NTP) resilience and security evaluation suite featuring an interactive terminal user interface (TUI). It simulates NTP packet spoofing, Kiss-of-Death responses, client rate-limit exhaustion, and Y2K38 epoch rollovers on embedded systems.
2. **VoidProbe (Go):** Real-time telemetry monitoring and security assessment tool for Linux-based embedded controllers. It evaluates target resilience against Denial of Service (DoS) attacks and validates resource management under stress in accordance with IEC 62443-4-2 requirements.
3. **Devicestats (Python):** Drozer penetration testing module that extracts low-level hardware, kernel, and operating system telemetry during Android mobile security assessments.
4. **Awesome-ICS-Writeups:** A curated compendium of industrial control systems security writeups, architecture specifications, and threat research papers.

---

## Credentials & Academic Background
- **ISA/IEC 62443 Cybersecurity Expert:** Fully certified across all 4 modules (Fundamentals, Risk Assessment, Design, Maintenance).
- **Certified Ethical Hacker (CEH v13)**
- **Docker Certified Associate (DCA)**
- **Microsoft Certified: Azure Fundamentals (AZ-900)**
- **Achilles Certified Tester**
- **M.Tech in Cyber Security & Incident Response:** National Forensic Sciences University (NFSU), Gandhinagar (2018–2020).
- **B.Tech in Computer Engineering:** Gujarat Technological University (GTU), Ahmedabad (2014–2018).

---

## Contact & Public Verification
- **Email:** hello@hexlab.xyz
- **Primary Website:** https://neutrinoguy.zip/
- **Security Research Blog:** https://hexlab.xyz/
- **GitHub:** https://github.com/neutrinoguy
- **LinkedIn:** https://linkedin.com/in/neutrinoguy
- **Twitter / X:** https://x.com/neutrinoguy