Vulnerability Researcher | Application Security Engineer | SAST • DAST • SCA | Web/API Security | Security Automation | Python | Bug Bounty Hunter
Embedded Files
I am a Cybersecurity Engineer specializing in Application Security, vulnerability research, and secure backend development. I secure production systems, identify and remediate critical security flaws, and build scalable applications with security embedded by design. My work spans OWASP Top 10, API Security, Server Hardening, and Python-Based Automation.
My Findings
DOM-Based XSS in AI Chat-Bot 👇
DOM-Based XSS in AI Chat-Bot 👇
Getting your first valid vulnerability report is a milestone every security researcher remembers. This post documents my journey of discovering a real-world DOM-based XSS in a production chatbot—not focusing on payloads or exploits, but on how to think, what to observe, and how small client-side mistakes can lead to serious security issues. This was my first step from learning theory to finding real impact.
Missing CAPTCHA Configuration in Signup Flow 👇
Missing CAPTCHA Configuration in Signup Flow 👇
CAPTCHA is often treated as a security control, but missing or weak CAPTCHA configuration does not always result in a valid vulnerability. This post explores how such misconfigurations are identified during testing, why they are frequently classified as informational, and what additional impact is required for them to matter in real-world security assessments.
Logout Without Revocation: A Session Token Analysis 👇
A practical security analysis of session management in a fintech API, exploring what happens when an access token remains valid after logout. This write-up breaks down the testing methodology, observed behavior, and key lessons learned in evaluating authentication and token revocation mechanisms.
Skills & Expertise
Skills & Expertise
🔐 Application Security
🔐 Application Security
Burp Suite
OWASP ZAP
OWASP Top 10
Web Security
API Security
Authentication & Authorization
Session Security
Vulnerability Assessment
Secure SDLC
⚔️ Offensive Security
⚔️ Offensive Security
Reconnaissance
Vulnerability Enumeration
Exploitation
Web/API Pentesting
Network Pentesting
Active Directory
Privilege Escalation
Security Automation
💻 Programming & Automation
💻 Programming & Automation
Python
Bash
JavaScript
C/C++
Java
PHP
SQL
Assembly
🛡️ Security Engineering
🛡️ Security Engineering
Threat Modeling
Server Hardening
Linux Security
Log Analysis
Vulnerability Management
Security Testing
⚙️ Backend & Infrastructure
⚙️ Backend & Infrastructure
FastAPI
Django
Flask
Docker
Nginx
Git
GitHub Actions
Linux
SSH
🗄️ Databases
🗄️ Databases
PostgreSQL
MySQL
MongoDB
Certificates 📃
Certificates 📃
What I Focus On 🎯
What I Focus On 🎯
Securing web and API-driven applications
Vulnerability assessment and exploit analysis
Linux server hardening and infrastructure security
Security automation and backend engineering in Python
Page updated
Google Sites
Report abuse