Offensive Security Researcher who reads other people's source code for a living, and occasionally gets a CVE for it.
- 10 published CVEs across Gitea, SuiteCRM, and ChamiloLMS — spanning RCE-enabling gate bypass, blind SSRF, cross-repo disclosure, privilege escalation, and account takeover.
- Ranked Top 100 security researchers in India — HackerOne (2025), Top 5% globally on TryHackMe.
- 100+ valid vulnerabilities responsibly disclosed across Google, Sony, Discourse, SupaBase,NASA, United Nations, US Department of Defence, British Airways, Netherlands Government, Stanford University, Starbucks, Groww, LeetCode, and more.
- Building Sentryd — an AI-assisted supply-chain scanner that catches malicious-by-design packages signature tools miss, and turns every finding into a deployable Sigma/KQL/YARA rule.
- Competed in national-level VAPT exercises (Pentathon '24, '25) run by the Government of India — realistic Web, API, and OT attack scenarios.
Google · Sony · NASA · United Nations · US Department of Defence · British Airways · Netherlands Government · Stanford University · Starbucks · Groww · LeetCode · Informatica · Discourse · Supabase and more (confidential)
| CVE ID | Target | Severity | Vulnerability |
|---|---|---|---|
| CVE-2026-58424 | Gitea | High(8.9) | Permanent Fork PR Workflow Approval Gate Bypass → Arbitrary Code Execution on CI Runners |
| CVE-2026-23606 | Gitea | High | Blind SSRF in OAuth2 Avatar Synchronization via Unvalidated OIDC Picture Claim |
| CVE-2026-58437 | Gitea | High | Repository Visibility Manipulation via Git Push Options |
| CVE-2026-57897 | Gitea | Medium | Cross-Repository Information Disclosure via Org-Level Actions APIs |
| CVE-2026-58507 | Gitea | Medium | Private Repository Existence Disclosure via go-get Meta Endpoint |
| CVE-2025-59542 | Chamilo LMS | Critical(9.0) | Account Takeover via Stored XSS |
| CVE-2025-59543 | Chamilo LMS | Critical(9.0) | Account Takeover via Stored XSS |
| CVE-2025-59541 | Chamilo LMS | High(8.1) | CSRF Vulnerability in Project Deletion |
| CVE-2025-64489 | SuiteCRM | High(8.3) | Privilege Escalation |
| CVE-2025-64490 | SuiteCRM | High(8.3) | RBAC Bypass |
Reported 100+ valid vulnerabilities across HackerOne - Public/Private programs — RCE, SSRF, IDOR, Auth Bypass, Privilege Escalation, BFLA, and PII exposure chains. Every report ships with full PoC, CVSS scoring, and MITRE ATT&CK mapping.
Building custom exploitation and automation tooling in Python and Bash — rate-limit bypass techniques, web cache deception detection, and OSINT/recon pipelines that cut manual triage time.
Contributor to OWASP Cornucopia across 6 releases (v2.6.14 → v3.1.0) — shipped a Swagger API, implemented CRE API Companion Edition, fixed SSR routing failures, and hardened schema-level input validation in production.
| Project | Description |
|---|---|
| 🛡️ Sentryd | AI-assisted supply-chain scanner — catches malicious-by-design packages (typosquats, dependency confusion, credential-harvesting install hooks) that signature-based tools miss. Generates validated Sigma/KQL/Falco/YARA rules, MITRE-tagged, with SARIF + CycloneDX SBOM output. |
| 🎭 Deceptor | Automated detection and exploitation of web cache deception vulnerabilities. |
| 🔭 Approach | End-to-end automated recon pipeline — subdomain enumeration, passive OSINT, AI-driven vulnerability triage. |
| 🧅 Tornet Granted | Research tool for enumerating onion URLs over the Tor network. |
| 🕵️ Xpose | Research-focused deanonymization tool for investigating illegal dark web operations. |
| Certification | Issued | Issuing Organisation |
|---|---|---|
| Certified AppSec Practitioner (CAP) | Jan 2023 | The SecOps Group |
| Certified in Cybersecurity (CC) | Oct 2022 | ISC2 |
| Penetration Testing | Sep 2022 | Charles Sturt University |
| Pentathon 2025 | Apr 2025 | Government of India |
| Pentathon 2024 | Mar 2024 | Government of India |
| Smart India Hackathon | Dec 2023 | Government of India |
Offensive Security: Web & API Pentesting · VAPT · Business Logic Exploitation · Threat Modelling · Attack Surface Mapping · Supply Chain Security · CI/CD Security · Source Code Review
Bug Bounty Platforms: HackerOne · Bugcrowd · Open Source (GHSA)
Exploitation Tools: Burp Suite Pro · Caido · Nuclei · FFUF · Amass · SQLMap · Metasploit · Wireshark · Nmap · Frida · ADB · Shodan
Programming & Scripting: Python · Bash · Node.js · Go (reading) · C · SQL
Frameworks & Standards: OWASP Top 10 · MITRE ATT&CK · PTES · CVSS v3.1/v4.0 · Sigma · SARIF · CycloneDX · NIST CSF
"The best vulnerability report isn't the one with the highest CVSS score — it's the one a developer can read once and immediately understand how to fix."
⭐ If any of my research or tools helped you, consider starring the repo. It genuinely helps.