Chief Technology Officer & Director at RedHunt Labs

Kunal Aggarwal  • Peerlist

TrackiT helps find the real-time location of friends and family. The application allows users to add members to their family and view their current locations on their devices. In situations of distress, users can also send panic messages to family members with just a press of a button. Users can also setup meeting points with friends and view routes to destination. The app uses Google Maps Service on iOS 6 (Google Maps SDK). The app uses a PHP and MySQL backend, to interact with the app.

TrackiT

Data encryption and decryption on the device using a custom encryption/decryption algorithm & sending/receiving the data using a secure channel to a dedicated server. Also implements secure links and a URL shortener, specific to the application, for each piece of text sent to the server for easy in-app data retrieval later.

iSecure

A web based tool to view the tree structure of manager-employee hierarchy in MakeMyTrip with complete employee details. This involved getting a daily update from Windows Active Directory Server using Python and using PHP and HTML as a frontend for it.

ProdSphere, A Continuous Delivery Tool

A PHP based application with plugins developed to integrate MySQL and MSSQL Live Databases for querying and exporting data. The web based client makes sure no Personal Identifiable Information (PII) is not directly viewable. The tool uses triple DES encryption to encrypt critical fields like email, mobile and credit card numbers. All querying activity is logged and alerted if any suspicious queries are found.

myClient, The Web DB Interface for MakeMyTrip

Built on drupal, HE Microsite works as a socializing platform for Holiday Expert ladies. Information posted by admin can be made visible to a specific group of HE based on their profile information. Multiple plugins were developed to add new functionalities like sending out emails to HEs on their birthdays, displaying dynamic frontpage for authenticated and anonymous users.

Holiday Experts Microsite

WebGuard is a tool to integrate in Production Pipelines to help identify security bugs right in the pre-production stage, thus reducing the time to prodution significantly. 
WebGuard uses ZAP Proxy Server as a backend, completely abstracted from the user in the form of a Web UI or API. WebGuard provides user with a proxy IP address which the user can enter in their browser and continue browsing the application like normal. Once done, returning to WebGuard the user can inititate a scan of the URLs list and view vulnerability report on the dashbard itself. WebGuard also allows user to run multiple ZAP Instances to segregate their project workspaces.
WebGuard provides a robust REST API that can be used to integrate into scripting or tools like Jenkins to trigger application flows directly from the building phase.

Some features of WebGuard include:

- Easy deployment using a single install script
- Web UI/API Layer and ZAP layer exist on separate servers, allowing the user to spawn more ZAP Instance servers for increasing load.
- Completely REST API driven
            

    
    

    
        Show less

webGuard

dataShark is a Security & Network Event Analytics Framework built on Apache Spark that enables security researchers, big data analysts and operations teams to carry out the below tasks with minimal effort:

- Data ingest from various sources such as file system, Syslog, Kafka.
- Write custom map / reduce and ML algorithms that operate on ingested data using abstracted Apache Spark functionality.
- The output of the above operations can be sent to destinations such as syslog, elasticsearch and can also be persisted in the file system or HDFS.

Completely built on Python with a modular framework, helping user develop their own input and output plugins with minimal code required. 

Current open source use case helps detect basic bot activity from raw apache access logs. This can help organisations quickly flag attacks without having to invest in other proprietary solutions.

Nominated in the "Best Security Product of the year 2016"​ at DSCI.
            

    
    

    
        Show less

dataShark

myAccess is the Single Sign-On Solution for integrating all web based apps in the internal network. Using Forgerock OpenAM as the backbone for it, myAccess can serve 1000s of users across multiple apps without a problem. Integration into an existing app requires minimal code change since major component is the Apache and IIS Agent installed directly on the Web Server.

myAccess, Single Sign-On

doublePlayer, is a unique music player for Android. doublePlayer, as the name suggests provides you with two individual players to play two different tracks at the same time. So just plug in your earphones (either both in your ears, or one in your friend's ear), select tracks for both, and start listening and enjoy.
When listening alone, use it as a normal music player, as you would do normally. Any player, left or right, may be used as an individual player.
When listening along with a friend, turn on the doublePlayer mode, and listen to separate music tracks on each earphone.

Flat, clean and beautiful User Interface, available in 5 different colours to choose from for personalisation.
            

    
    

    
        Show less

doublePlayer

A Notification REST API Platform was to be built for sending out 2 types of notifications, Emails and Push Notifications. For Email Notifications, CheetahMail, an external email delivery platform was hooked up using REST API to send Personalized Bulk Promotional and Transactional Mailers to users. For Push Notifications, we connected directly to GCM for Android and APN for iOS devices. This Notification Platform was exposed as a REST API service to the QlikView team to send out daily mailers.

Notification API Platform

myEagle is a single view that provides granular information into the MakeMyTrip Infrastructure and user information. Built using python and Django, myEagle can easily provide information such as server pools in load balancer, monitoring information across sites, build versions running on servers, user access on various components like LB, WAF, NIS and linking back to AD.

myEagle, MakeMyTrip Inventory Tool

An iOS game for the iPhone that uses location tracking to generate a random location (unknown to the user) some specified meters away from their current location. The objective is to locate and reach that Secret Spot, using hints from the application.

Find the Spot

A refreshing new UI design inspired by the Windows Metro design for Windows 7. The app retrieves information from the web including synopsis, actors, duration, movie trailer (in-built YouTube Video Player), director and more, and presents it to the user in a clean layout.

The Complete Movie Database

As an extension to myClient, Desensitize is a client side chrome extension installed using Windows Group Policy onto user’s system to further provide encryption capabilities across all internal apps. The plugin continuously watches data being received by the browser and before rendering out to the viewport, it encrypts emails, mobile numbers. This makes sure, sensitive data across all internal web based apps is encrypted to the user. Plugin disables app access in incognito mode to prevent data viewing in that window.
            

    
    

    
        Show less

Desensitize Chrome Extension

Automated the incident response process and tracking in MakeMyTrip. Brought down the turn around time for blocking an attack at our infrastructure from an average of 3 hours to just 2 mins. Integrated with multiple data sources to enrich mail notifications of attacks with all the required information. This mail is a single point of view to analyze an incoming attack with details like, whois, reputation check, attack vectors, raw HTTP packets, event count. Just replying with keyword block on this mail automatically blocks the source IP at our perimeter WAF. Metric tracking to log each event with a JIRA ticket and mark it resolved upon action. Reply on Mail action framework to hook-up easily to any type of mail to carry out Automation tasks. Data enrichment and modular functions just plug and play into existing mails to make them more meaningful. Threat intelligence API built to provide a single endpoint to get all available information for a single IP related to reputation, access pattern, attack vectors (if any). Other multiple scripts to help in streamlining the Incident Response
            

    
    

    
        Show less

Incident Response Automation

Bot Blocking framework was developed to automate the process of blocking bots scraping our website without any user intervention. Using multiple parameters like Hosting check, whois data and access pattern of source IPs the framework takes a decision of blocking the IP at our perimeter Web Application Firewall. With this framework in place we have seen an improvement of 300% in automatic blocking.

Bot Blocking Framework

datasploit is an Open Source tool made for performing OSINT on a domain / email / username / phone and find out information from different sources. Correlates and collaborate the results, show them in a consolidated manner. It is now a framework so that dataSploit can be extended with your own data sources easily. dataSploit has been listed in the Top 10 Security Tools of 2016 by Toolswatch (https://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/)

dataSploit

doublePlayer, is a unique music player for Android. doublePlayer, as the name suggests provides you with two individual players to play two different tracks at the same time. So just plug in your earphones (either both in your ears, or one in your friend's ear), select tracks for both, and start listening and enjoy.
When listening alone, use it as a normal music player, as you would do normally. Any player, left or right, may be used as an individual player.
When listening along with a friend, turn on the doublePlayer mode, and listen to separate music tracks on each earphone.

Flat, clean and beautiful User Interface, available in 2 different colours to choose from for personalisation.

Free version, provides only 2 colors to choose from and has ads.
            

    
    

    
        Show less

doublePlayer Free

To complement the CD tool, a Change Request Management tool was to be built which incorporated a workflow system for managing various levels of approvals. To achieve this, Activiti, an open source tool, was used for modeling the process flows. A wrapper UI was built over it using Django which interacted with Activiti using REST APIs, and Twitter Bootstrap for styling the UI.