🔭 I’m currently working on Cybersecurity Analysis, Penetration Testing, and active on HackerOne
🛡️ Member of @Cyber4All Community
🌱 I’m currently learning everything about ethical hacking
👯 I’m looking to collaborate on HackerOne | Bugcrowd
💬 Ask me about anything — I love hacking and breaking rules (ethically of course 😄)
💻 I’m a proud ethical hacker, pentester, and a computer scientist — always learning, always hacking.

Feel free to explore, learn, and connect with me on LinkedIn or drop a mail at Mail.

Hi, I’m Rajkumar Kumawat 👋

Cybersecurity Analyst | Penetration Tester | HackerOne Contributor | Ethical Hacking Enthusiast

🕵️ OSINT Framework: The Ultimate Guide for Ethical Hackers & Cyber Investigators

🔍 What is OSINT? Open Source Intelligence (OSINT) refers to collecting and analyzing publicly available data to uncover valuable information. It’s widely used in: 🔴 Penetration Testing & Red Team Recon 🔵 Threat Intelligence & Blue Team Defense 🕵️‍♀️ Criminal Investigations & Digital Forensics 🏢 Corporate Risk & Brand Monitoring Examples of OSINT sources: Websites, Social Media, Forums Public Databases (WHOIS, DNS, GitHub) Pastebins, Breached Data Dumps Metadata in files & images 🌐 What is the OSINT Framework? 🔗 https://osintframework.com ...

Mastering Unicornscan: High-Speed Port Scanning with Real-World Analysis

📌 Purpose Learn how to use Unicornscan — a high-performance asynchronous port scanner — for advanced network reconnaissance, stealth scans, and OS fingerprinting. Includes real command outputs, PCAP logging, and a full lab scenario. 🚀 Introduction When you need blazing-fast port scans, TTL-based OS detection, or stealthy TCP/UDP reconnaissance, Unicornscan shines. Included in Kali Linux, this powerful tool delivers performance Nmap sometimes can’t match on large-scale or noisy networks. ...

Mastering Nmap for Real-World Network Scanning

📌 Purpose: This guide explains every important nmap option using its -h output, includes practical usage examples, analysis, and real-world scanning tactics. Designed for cybersecurity students, red teamers, and system admins. 🛠️ Nmap Installation Guide Before diving in, let’s install Nmap on your system. It’s cross-platform and very easy to set up. Ubuntu / Debian: sudo apt update && sudo apt install nmap -y CentOS / RHEL: sudo yum install nmap -y Arch Linux: sudo pacman -S nmap macOS (via Homebrew): brew install nmap 🔹 Windows Download from official site: https://nmap.org/download.html Run the installer (includes Zenmap GUI if desired) Add Nmap to PATH during install for CLI use from Command Prompt or PowerShell ✅ Once installed, test it using: ...

🧪 Setting Up a Penetration Testing Lab using VirtualBox + Kali Linux

🛡️ A penetration testing lab is a safe, isolated environment for ethical hackers to learn and test exploits without any risk to real networks or legal issues. 🖥️ Step 1: Choose a Virtualization Platform Tool of Choice: Oracle VirtualBox ✅ Free & open-source 💡 Works on Windows, Linux, macOS 🔁 Alternatives: VMware Workstation, Hyper-V, KVM 📦 Step 2: Download Required ISO / VM Files VM Role OS/Tool Download Link Attacker Kali Linux (Latest) kali.org Target (Vuln) Metasploitable 2 SourceForge 🧰 Step 3: Install Kali Linux (Attacker Machine) Open VirtualBox → New VM → Name: Kali Linux Type: Linux, Version: Debian (64-bit) Assign: RAM: 2 GB minimum Disk: 20 GB (Dynamically Allocated) Mount Kali ISO and boot. Follow GUI installation: Create user Choose mirror (optional) Partition and install After boot, update system: sudo apt update && sudo apt upgrade -y Install basic tools: sudo apt install net-tools curl vim git proxychains nmap 🎯 Step 4: Import Metasploitable 2 (Target Machine) Download .ova → VirtualBox → File → Import Appliance ...

🔍 Recon-ng Mastery: Complete OSINT Framework Guide (Beginner to Expert)

🚀 Learn how to use Recon-ng from scratch to expert level with real-world examples, commands, API tips, and professional automation workflows. 🧠 What is Recon-ng? Recon-ng is an open-source OSINT (Open Source Intelligence) framework written in Python that helps security researchers, red teamers, and bug bounty hunters automate reconnaissance tasks. It mimics the Metasploit interface, offering powerful modules to collect intel like domains, hosts, credentials, social profiles, leaked data, and more — all in an automated, database-backed workspace. ...

Mastering Ping: The Network Reconnaissance Swiss Army Knife

The ping command is the most fundamental yet powerful network diagnostic tool in any cybersecurity professional’s arsenal. this deceptively simple tool can reveal critical network intelligence when used with advanced techniques. 🔍 What is Ping? Ping (Packet Internet Groper) uses ICMP Echo Requests to: Verify host availability Measure network latency Detect packet loss Map network paths Identify firewall configurations ℹ️ Protocol Note: Ping operates at Layer 3 (Network Layer) using ICMP protocol, making it independent of higher-layer services. ...

🔍 Mastering Photon: The Ultimate Web Scraping & OSINT Tool for Ethical Hackers

🌐 What is Photon? Photon is a lightning-fast, smart web crawler built specifically for OSINT tasks. It’s not just a URL scraper—it’s a powerful weapon for bug bounty hunters, ethical hackers, and red teamers to extract: ✅ Emails & social links ✅ Endpoints & APIs ✅ JS files & secrets ✅ Hidden files (PDFs, ZIPs) ✅ Wayback Machine archives ⚠️ Note: Use Photon only on websites you own or have explicit permission to test. Unauthorized scans may violate cyber laws like CFAA. ...

🔍 YouTube OSINT: Extract Hidden Intel from Public Videos

🌐 Why YouTube is an OSINT Goldmine YouTube videos often leak valuable data without organizations realizing it. By analyzing videos carefully, you can extract: 🧑 Employee identities (via intros or ID cards) 🖥️ Internal systems or credentials visible on screens 🌍 Location data (GPS tags or visible environments) 🗂️ Metadata (upload date, location, camera info) 📽️ Deleted or private content (recovered via thumbnails or third-party sources) ⚠️ Disclaimer: This blog is for educational and ethical hacking purposes only. Always ensure you have permission when conducting OSINT investigations. ...

Advanced Google Dorking for Target Reconnaissance

Google Dorking (also known as Google Hacking) is a powerful method used in Open Source Intelligence (OSINT) to extract sensitive information from search engines using advanced search operators. As cybersecurity enthusiasts, especially in the RajkumaR CyberSec Blog, we explore how attackers and ethical hackers utilize these dorks in real-world reconnaissance. 🔍 What is Google Dorking? Google Dorking involves using advanced search operators to uncover exposed files, login panels, debug pages, and misconfigured servers. It helps penetration testers, bug bounty hunters, and red teamers gather actionable intelligence. ...