> scope --primary
I test web applications, APIs, and mobile applications to uncover exploitable vulnerabilities, validate real-world impact, and provide actionable remediation guidance.
Application security / VAPT
Focused testing across the application layers that carry identity, data, and business value.
Authentication, authorization, session management, input validation, injection, XSS, CSRF, SSRF, business logic, and security misconfiguration.
Authentication, authorization, BOLA / IDOR, rate limiting, input validation, API abuse, sensitive-data exposure, and business logic vulnerabilities.
Android assessment, static and dynamic analysis, API testing, authentication, local data storage, reverse engineering, and runtime instrumentation.
Asset discovery, subdomain enumeration, endpoint discovery, technology fingerprinting, exposure analysis, and attack-surface mapping.
Reproduction, exploit validation, impact assessment, evidence collection, and severity classification grounded in observed behavior.
Executive summary, technical findings, proof of concept, business impact, severity, remediation, and retest validation.
Independent vulnerability research
Responsible-disclosure work, security recognition, and attack-surface research presented as concise case studies.
Recognised after responsibly disclosing validated security findings to help strengthen platform security.
Reported a validated vulnerability through a responsible disclosure programme.
Responsible disclosure of a production mobile-app security issue involving sensitive-data exposure.
A finding validated by the Infosec team through responsible disclosure.
Cybersecurity achievement
Invited to a private bug bounty program. Received an exclusive invitation through BugBase to join HDFC Bank's private hdfcbankprivate program.
Security tools and platforms
Local-first tools, reconnaissance workflows, and security platforms designed to turn complex analysis into useful decisions.
Unified threat and asset lifecycle intelligence.
Enterprise security orchestration that correlates assets, services, SBOMs, APIs, findings, and risk into one auditable view for prioritised remediation.
48 reconnaissance tools in one local-first workbench.
A desktop OSINT application for repeatable network, web, DNS, and intelligence workflows with local history and exportable results.
A desktop Nmap scanner with a security dashboard.
Turns command-line scanning into a guided workflow with risk assessment, live output, service insights, scan history, and browser-ready reports.
Activity telemetry with privacy boundaries.
A local dashboard that records foreground application transitions and approximate usage time, with explicit controls for optional report delivery.
Recursive subdomain reconnaissance.
Chains passive discovery, DNS brute force, HTTP probing, metadata collection, and takeover checks into a resumable workflow.
Evidence-backed Android reconnaissance.
Local static analysis for endpoints, secrets, permissions, exported components, signing details, MASVS posture, risk scoring, and reports.
A repeatable process
Map the attack surface and identify exposed assets.
Discover endpoints, technologies, parameters, APIs, and authentication boundaries.
Systematically test security controls and application behavior.
Manually reproduce and validate vulnerabilities.
Demonstrate realistic impact within authorized testing boundaries.
Document evidence, severity, business impact, and remediation.
Verify that remediation actually resolves the vulnerability.
Applied security work
Completed a full-time, hands-on office internship alongside experienced cybersecurity professionals on client engagements and day-to-day information security operations.
Conducting independent security research across web applications and APIs through ethical, coordinated disclosure programmes.
Contributed to Flutter-based mobile application development within an AI-driven communication platform.
Supporting evidence
A record of completed certifications and technical learning. The practice remains VAPT-led.
Defronix Certified Junior Security Professional (DCJSP)
SOC Level 1 · SOC Level 2 · Security Engineer · DevSecOps · Jr Penetration Tester · AI Security · Web Fundamentals · Pre Security · Advanced Endpoint Investigations
Certified Ethical Hacker (CEH) · Python Essentials 1 · Python Essentials 2
Cloud Security · Compute · Introduction to Cloud
Certified Red Team Operations Management (CRTOM) · Foundations of Log Analysis for Cyber Defense · Certified LLM Security Expert (CLLMSE)
SQL Injection Attacks — Code Red · Python Programming Fundamentals · Fundamental Cloud & DevOps
Introduction to AI Security · September 2026 · Credential ID 61a9cf06-4ee8-4e8b-abdd-1fb6cbb6ee26
LLM Security Fundamentals · September 2026 · Credential ID 7eaf1471-ddd1-434e-807f-5276b396d9b3
Security Principles in Cloud Computing · July 2026 · Credential ID 26136940
Bash Shell Scripting · You Suck at Programming / ySAP.sh · April 2026
Android App Hacking – Black Belt Edition · Roman Stuehler · October 9, 2026 · 54.5 hours
API Security Testing Guide by The XSS Rat · Wesley Thijs · January 4, 2026 · 5.5 hours
Certified Cyber Security Analyst (C3SA) · October 2026 · Credential ID 6adc80694d4fa519bed3d2d6
Tools serve the method
Burp Suite Professional · OWASP ZAP · Postman · Caido · mitmproxy · Nuclei · ffuf · Gobuster · SQLmap · Nikto · WPScan · testssl.sh
Subfinder · Amass · httpx · Katana · gau · Wayback Machine · Arjun · dnsx · Naabu · Shodan · Maltego · WHOIS · DNS analysis
Nmap · Wireshark · tcpdump · Netcat · OpenSSL · service and port analysis · packet inspection
MobSF · Frida · Objection · JADX · Apktool · ADB
Wazuh · SIEM · Sigma · YARA · Sysmon · log analysis · malware triage · IOC extraction
Autopsy · Volatility · Velociraptor · incident triage · evidence handling
Windows Server · Active Directory · Group Policy · GPO · ADMX / ADML · Kali Linux · Windows · Linux
Python · Bash · Git · GitHub Actions · Semgrep · React · Next.js · Django · Qt 5
AWS · Prowler · ScoutSuite · Trivy · Checkov · Docker
PostgreSQL · MySQL · TLS / SSL · configuration and service auditing
OWASP WSTG · OWASP ASVS · OWASP API Security Top 10
How I work
Ten quick answers about how I think, scope, investigate, and report during application security work.
I start by confirming authorization and scope. Then I map the exposed surface - DNS records, subdomains, live hosts, technologies, and public entry points - before exploring the application and its APIs. Reconnaissance helps me decide where careful, hands-on testing can be most useful.
I first learn how the application is meant to work: its user journeys, roles, trust boundaries, and important data flows. Understanding normal behavior makes it easier to spot where access controls or business rules may fail.
I work only with explicit authorization and agreed scope. I respect exclusions, avoid disruptive actions, and keep testing proportionate to the objective. If I encounter something that could affect real users or data, I stop and follow the agreed escalation process.
Tools help me discover and prioritize things to investigate, but an alert is only a lead. I manually validate relevant behavior, check the conditions required to reproduce it, and rule out false positives before reporting a finding.
I verify it with the least intrusive steps needed, capture clear and appropriately sanitized evidence, and avoid accessing or changing data beyond what is necessary to demonstrate impact. I then document the affected area and the conditions that make the issue reproducible.
I consider realistic impact, exploitability, exposure, required privileges, and the application context - not just a tool's severity label. This helps teams distinguish urgent risks from issues that need different remediation priorities.
Each finding should explain what is affected, how to reproduce it, the observed evidence and impact, and practical remediation guidance. I aim to make findings clear enough for a development team to verify, prioritize, and fix.
My focus is web applications, APIs, and Android applications. I am especially interested in the places where authentication, authorization, sensitive data, and business logic meet.
I have developed it through structured cybersecurity learning, hands-on labs, independent vulnerability research, and practical experience with security teams. Each assessment gives me another opportunity to improve how I investigate, validate, and communicate risk.
I report what was tested, the scope and limitations, and the security behavior I observed. A responsible assessment is about giving an accurate account of the work - never inventing findings or claiming that untested areas are secure.
Education
B.A. English Language and Literature, General · 7.81 CGPA
Secondary Education (ICSE) and Higher Secondary Education (ISC), Arts
Giving back to the community
WHY THIS MATTERS TO ME
This cause matters to me because every girl deserves the chance to attend school, learn, and shape her future with confidence. Access to menstrual products is part of that dignity. I wanted to give back in a practical way by supporting work that helps remove barriers to education.
When girls can learn with dignity, more possibilities stay open to them.
I’m grateful for the opportunity to volunteer with She Can Foundation. I supported its girls' education and menstrual dignity initiatives through remote outreach and donor engagement, collaborated with a Foundation mentor, helped secure donations, and raised awareness of sanitary pads as a basic necessity for continued education.
Support the Foundation