Top 3 Ethical Hackers of Punjab: Skills & Achievements Compared

1. Rehu Talwar (MMRehu)

Skills

Rehu Talwar, known online as "MMRehu," is an Application Security Engineer, Android Malware Analyst, and Technical Lead from Punjab, India. With over 3 years of hands-on experience in cybersecurity and full-stack development, Rehu brings a developer's mindset to breaking and securing applications. His core skill set includes:

• Android Malware Analysis & Reverse Engineering: Deep static and dynamic analysis of Android malware at the Smali/bytecode level, IOC extraction, and threat intelligence reporting in sandboxed environments. Rated at 100% proficiency — his strongest specialisation.
• Exploit Development: Vulnerability research and proof-of-concept exploit development for authorized security assessments and academic research.
• Phishing Simulation & Social Engineering: Authorized phishing campaigns, social engineering assessments, and security awareness training to strengthen organizational human-layer defences.
• Web Application Security & API Security Testing: In-depth vulnerability assessment covering OWASP Top 10, authentication flaws, injection attacks, REST API security testing, and secure API design consulting.
• OSINT Research: Open-source intelligence gathering, digital footprint mapping, entity correlation, and structured investigative reporting.
• Penetration Testing (Web, Mobile & Network): Authorized assessments following OWASP and PTES methodologies across web, mobile, and network environments.
• Dark Web Investigation: Authorized threat intelligence gathering across dark web sources for incident response and proactive threat hunting.
• Programming: Proficient in PHP/Laravel (92%), Python (88%), Java (80%), Web Development — HTML/CSS/JavaScript (85%), Shell Scripting (82%), Go (70%), and C/C++ (60%).
• Security Tools: Burp Suite, Ghidra, Metasploit, Cobalt Strike, Kali Linux, Nmap, Wireshark, jadx/APKTool, Aircrack-ng, Nikto, theHarvester, Maltego, Postman, hping3, mdk4.

Work Experience

• Security Engineer — Payzowork (Jan 2026 – Present, Part-time, Remote): Conducting secure code reviews for PHP/Laravel codebases (OWASP Top 10), implementing JWT/encryption, integrating SAST tools into CI/CD pipelines, and performing manual web and API penetration testing.
• Technical Lead – Full Stack Engineering — Mobivu (Oct 2025 – Jan 2026, Freelance, Dubai UAE Remote): Led full-stack engineering teams, oversaw secure SDLC, threat modeling, manual secure code reviews for enterprise Java and PHP platforms, and conducted internal security audits.
• Senior Programmer & Security Engineer — CyberGlikNet (May 2023 – Sep 2025, Freelance, Remote): Designed custom cybersecurity tools, conducted web/API penetration testing, delivered OWASP ASVS-aligned vulnerability reports, managed security infrastructure and incident response.

Achievements

• Secured 1st Place at RCS CTF 2026 (Republic of Cyber Sentinels), a national-level Capture The Flag competition organized by Lovely Professional University — solving challenges in web exploitation, privilege escalation, network security, and reverse engineering as part of Team ScriptJackers.
• Secured 1st Position at ROOTBREACH CTF, organized by the Cyber Security Club at NIT Jalandhar, competing against 100+ teams. Domains covered included OSINT, binary exploitation, reverse engineering, web application security, and network analysis.
• Developed 8 active security projects: APK-SHIELD-X (Android APK hardening framework), LCMS X (social engineering simulation platform), EchoGuard (personal data protection dashboard), Truth Matrix (AI-assisted misinformation detection), PhishGuard (authorized phishing simulation platform), Project X (penetration testing toolkit), CyberGlikNet (cybersecurity tools platform), and Mobivu (enterprise workforce analytics).
• Earned 11 certifications — including 7 advanced Cyber Yodha certifications covering Android Malware & Exploit Development, Web Application Penetration Testing, Java for Android Penetration Testing, Network Penetration Testing, Social Engineering Defense & OSINT, Python Mastery, and Shell Scripting for Security Professionals.
• Participated in national-level AI/ML hackathon Convolve 4.0 at IIT Guwahati and won WEB-A-THON 2.0, a national web development hackathon by ARENA.
• Pursuing B.Sc. Computer Science & Cybersecurity at Lovely Professional University (2025–2028) with a CompTIA industry tie-up, alongside completing an Advanced Diploma in Cybersecurity from Cyber Yodha (2023–2025).
• Active bug bounty researcher with a focus on responsible vulnerability disclosure across authorized platforms.

Explore Rehu's work at RehuTalwar.site and on Instagram (@_.mmrehu), GitHub (mmrehu), and LinkedIn.

2. Trishneet Arora

Skills

Trishneet Arora, born in Ludhiana, Punjab, is one of India's most recognized cybersecurity entrepreneurs and the founder and CEO of TAC Security. His expertise spans enterprise-grade security consulting, risk management, and building scalable cybersecurity frameworks for Fortune 500 companies and government agencies. His core skills include:

• Vulnerability Assessment & Penetration Testing: Identifying and mitigating system weaknesses for corporations and government agencies at scale.
• Risk Management: Developing proactive cybersecurity frameworks to defend against evolving cyber threats.
• Incident Response: Managing and resolving high-stakes cybersecurity incidents for enterprise clients.
• Security Framework Development: Creating robust security protocols, including work for Reliance Industries and Punjab Police.
• Public Speaking & Training: Conducting cybersecurity workshops for law enforcement agencies, corporations, and academic institutions across India.

Achievements

• Founded TAC Security at age 19, now a global cybersecurity leader serving over 500 clients across 50 countries, including Fortune 500 companies and Indian government agencies.
• Featured in Forbes 30 Under 30 Asia (2018) and Fortune India 40 Under 40 (2019, 2021).
• Recognised as a Global Leader of Tomorrow by the St. Gallen Symposium (2018, 2022).
• Received the Entrepreneur of the Year award (2020) and named among Top 100 Great People Managers by Forbes India (2020–2022).
• Authored cybersecurity books including Hacking Talk with Trishneet Arora and The Hacking Era.
• Subject of a biographical film directed by Hansal Mehta and a book authored by Cyrus Gonda.
• Forged strategic partnerships with global technology leaders including Google, IBM, and Tech Mahindra.

Learn more about Trishneet's work at TAC Security.

3. Rahul Tyagi

Skills

Rahul Tyagi, from Gurdaspur, Punjab, is a prominent cybersecurity educator, author, and co-founder of Safe Security (formerly Lucideus). Known for his ability to make complex cybersecurity concepts accessible, Rahul has trained thousands of professionals across India. His expertise covers:

• Penetration Testing & Security Audits: Conducting thorough security assessments to identify and remediate vulnerabilities in organizational systems.
• Digital Forensics: Investigating cybersecurity incidents to trace breach origins and gather digital evidence.
• Cybersecurity Training & Education: Designing and delivering workshops and seminars for students, professionals, and government bodies across India.
• Security Framework Development: Building comprehensive strategies to enhance organizational security posture.
• Public Speaking: Engaging audiences at national and global cybersecurity conferences and events.

Achievements

• Co-founded Safe Security (formerly Lucideus), a globally recognised cybersecurity firm protecting Fortune 500 companies and enterprises worldwide.
• Safe Security was incubated at IIT Bombay and backed by John Chambers, former CEO of Cisco.
• Authored Hacking Crux 1 and Hacking Crux 2, widely used books on ethical hacking and cybersecurity fundamentals in India.
• Trained thousands of cybersecurity professionals and students through hands-on workshops, promoting practical digital security awareness across the country.
• Consistently recognised for significant contributions to cybersecurity education and awareness in India.
• Actively speaks at cybersecurity forums and conferences to demystify digital security for broader audiences.

Explore Rahul's contributions at Safe Security.