Regaan is a Security Researcher, Ethical Hacker, and Full-Stack Engineer based in India. He is the founder of Rot Hackers, a cybersecurity training platform. He specializes in offensive security, penetration testing, exploit development, and secure software development.

Rot Hackers is a cybersecurity training platform founded by Regaan. It offers courses in ethical hacking, penetration testing, bug bounty hunting, and exploit development. The platform provides hands-on practical training to help students become security professionals.

Who founded Rot Hackers?

Rot Hackers was founded by Regaan, a Security Researcher and Full-Stack Engineer from India. He created the platform to provide quality cybersecurity education and practical training.

What projects has Regaan created?

Regaan has created several notable security tools including PoCSmith (AI-powered exploit generator), ProtoCrash (protocol fuzzer), RedLang (security programming language), WSHawk (WebSocket security scanner), and various C2 frameworks. Many are open-source on GitHub.

Is Regaan available for hire?

Yes, Regaan is available for security consulting, penetration testing, and software development projects. You can contact him through his portfolio website at regaan.rothackers.com.

REGAAN

01. About Me

I am a Security Researcher and Full-Stack Engineer specializing in Offensive Security, Systems Programming, and Mobile Application Security.

From building custom compilers like RedLang and Keikaku to architecting secure learning platforms like Rothackers, I bridge the gap between low-level exploitation and scalable software engineering.

With 4+ years of experience, I build robust, scalable applications while simultaneously breaking them to ensure maximum security. My expertise spans penetration testing, secure backend design, real-time systems, and AI/LLM integrations.

Offensive Security

Systems Programming

Mobile Security

02. Technical Arsenal

WebSocket Security

Penetration Testing

OWASP Top 10

OAST

Session Hijacking

XSS / SQLi

SSRF / XXE

WAF Bypass

Python

JavaScript

TypeScript

Java

SQL

React

Next.js

Node.js

Express

Playwright

Docker

Burp Suite

OWASP ZAP

Git Forensics

MongoDB

Compiler Design

LLVM

Systems Programming

03. Experience

Guest Instructor — Mobile App Development

Dwaraka Doss Goverdhan Doss Vaishnav College (DDGDVC)

Student Reviews

▹Leading an intensive 15-day workshop for students on mobile application development using MIT App Inventor.
▹Covering UI/UX design, logic building, API integration, and real-world project development.
▹Mentoring students through the full app lifecycle from wireframing to APK deployment.

Workshop Instructor — Modern Cyber Attack Engineering

eHackify

▹Delivered a 2.5-hour workshop covering malware development concepts, reverse engineering, exploitation flows, C2 frameworks, OPSEC, and red-team methodology.

Full Stack Developer & Security Engineer

ROT Hackers

▹Built and maintained full-stack applications using React, Node.js, and real-time WebSocket systems.
▹Implemented authentication hardening, API security controls, and session-management defenses.
▹Deployed backend services using Docker, PM2, and CI/CD workflows.
▹Developed internal automation tools for vulnerability testing and diagnostics.

Independent Study — Cybersecurity & Software Engineering

Self-Directed

▹Focused on offensive security, secure full-stack engineering, AI systems, and tool development through structured hands-on learning.

04. Featured Projects

Keikaku (計画) Language

A dynamic, interpreted programming language designed for masterminds. Features advanced generators, native async/await, and deterministic control flow constructs.

CInterpreterCompiler DesignSystems Programming

Maya - Esports Tournament Platform

A production-grade esports tournament management system featuring real-time room updates, team verification, and integrated monetization.

React NativeWebSocketsAdMobFirebase

WSHawk v2.0

A modern exploitation-driven WebSocket vulnerability scanner. Designed modular scanning engine detecting 10+ WebSocket vulnerability classes with 22,000+ attack payloads.

PythonWebSocketsSecurity ToolOpen Source

ProtoCrash

Coverage-guided protocol fuzzer for vulnerability discovery. Features distributed fuzzing, smart mutation engine, and automated crash analysis.

PythonFuzzingSecurity ToolPyPIDistributed Systems

PoCSmith

AI-powered proof-of-concept generator for security research. Fine-tuned CodeLlama-7B model trained on 1,472 exploit samples achieving 78.4% token accuracy.

PythonAI/MLSecurity ToolPyPIHugging Face

Rothackers Mobile & Backend

The core learning platform featuring a React Native mobile app with E2EE and a Node.js/MySQL backend with real-time features.

React NativeNode.jsMySQLRedisWebRTCSocket.io

Rothackers Admin Dashboard

Comprehensive analytics and content management system for the mobile app. Built with Next.js 15, features real-time data visualization.

Next.js 15Tailwind CSSRechartsFramer Motion

Rothackers Platform

Enterprise LMS with OTP 2FA, CSRF protection, audit logging, certificate generation with verification codes, brute-force protection, session management, email notifications, batch management. Custom cursor, particle effects, network graphs.

Next.js 16Node.jsMySQLRedisSocket.ioNodemailer

Rothackers Masterclass

Separate educational platform with interactive course content and authentication. Built for self-paced learning.

Next.jsAuthenticationPWA

Rothackers Academy

A modern SaaS learning platform with AI-powered features. Built with Next.js 15, Drizzle ORM, and Google Gemini AI.

Next.js 15Drizzle ORMStripeGoogle Gemini AI

Rothackers Security C2

Advanced multi-platform C2 framework featuring a Go-based Windows Agent and a macOS Supply Chain Implant that analyzes Gatekeeper mechanisms.

GoPythonRedismacOS/WindowsSecurity Research

Android Security Framework

A production-grade Android 15 security assessment framework featuring Smali bytecode injection, Redis-backed C2, and real-time data analysis.

SmaliAndroid InternalPythonRedisSecurity Research

RedLang

A custom systems programming language designed for security research. Features a full LLVM-based compiler, Language Server (LSP), and built-in low-level primitives.

C++LLVMCompiler DesignSecurity Research

SQL Tamper Framework v2.1.0

Enterprise-grade, context-aware SQL transformation framework for bypassing modern WAFs (AWS, Cloudflare, Akamai). Features custom lexer, AST analysis, and automated Docker/PyPI distribution.

PythonWAF BypassAST AnalysisDevOps

OffSec Echo Writeups

Comprehensive writeups for 9 weeks of advanced security challenges covering malware analysis, forensics, and cloud exploitation.

Technical WritingMalware AnalysisForensics

Initialize Connection?

Whether you have a question, a project idea, or just want to discuss the latest in security research, my inbox is always open.

GitHub

View Resume_

System Status: ONLINE