I am a Cybersecurity Engineer specializing in Application Security, vulnerability research, and secure backend development. I secure production systems, identify and remediate critical security flaws, and build scalable applications with security embedded by design. My work spans OWASP Top 10, API Security, Server Hardening, and Python-Based Automation.

My Findings

DOM-Based XSS in AI Chat-Bot 👇

Getting your first valid vulnerability report is a milestone every security researcher remembers. This post documents my journey of discovering a real-world DOM-based XSS in a production chatbot—not focusing on payloads or exploits, but on how to think, what to observe, and how small client-side mistakes can lead to serious security issues. This was my first step from learning theory to finding real impact.

Missing CAPTCHA Configuration in Signup Flow 👇

CAPTCHA is often treated as a security control, but missing or weak CAPTCHA configuration does not always result in a valid vulnerability. This post explores how such misconfigurations are identified during testing, why they are frequently classified as informational, and what additional impact is required for them to matter in real-world security assessments.