🔐 Certified Ethical Hacker and Penetration Tester with 4+ years of experience in Vulnerability Assessment and Penetration Testing (VAPT), exploit development, and responsible vulnerability disclosure.
💡 Credited with 7 published CVEs, including three Microsoft MSRC registered vulnerabilities, and 150+ vulnerabilities discovered across web, mobile, API, and cloud environments.
🏆 Recognized in the Hall of Fame by NASA, Google, Microsoft, Opera, Alibaba Cloud, Samsung, Nokia, UNESCO and other global organizations for critical security research.
🧠 Specialized in API Security Testing, Cloud Red Teaming, and Red Team Operations, with hands-on expertise in Active Directory exploitation and enterprise red team engagements.
- 🛡️ Security Researcher & Penetration Tester at Binary Shilders
- 🐞 Active Bug Hunter on HackerOne & Bugcrowd, 7x CVE credited researcher
- 🥇 7th Place at HackwithIndia 2026, India's Biggest Live Hacking Bughunt
- 🎯 Certified Red Team Professional (CRTP), focused on Active Directory & enterprise red teaming
- 🚩 Admin & Security Researcher at Pirates of the Dead Flag (CTF Team)
- 🔍 Specialized in Web, API, Mobile & Cloud Security Testing
✔ Penetration Testing & VAPT
✔ Web App & API Security Testing
✔ Red Team Operations
✔ Active Directory Exploitation
✔ Cloud Security (Multi-Cloud)
✔ Vulnerability Assessment & OWASP Top 10
✔ CVE Analysis & Disclosure
✔ Exploit Development
✔ Privilege Escalation & Lateral Movement
✔ Digital Forensics & Malware Analysis
✔ Bug Bounty Hunting (HackerOne/Bugcrowd)
Burp Suite Pro • Nmap • Metasploit • OWASP ZAP • Nessus • Wireshark • Kali Linux • Postman • Nuclei • Amass • BloodHound • Cobalt Strike • SQLmap • Frida • AWS / Azure / GCP Security Tooling • Git
🏅 CRTP, Certified Red Team Professional
🏅 CEH, Certified Ethical Hacker
🏅 ASCP, API Security Certified Professional
🏅 CASA, Certified API Security Analyst
🏅 C)PEH, Certified Professional Ethical Hacker
🏅 CRTA, Certified Red Team Analyst
🏅 MCRTA, Multi-Cloud Red Teaming Analyst
🏅 CNSP, Certified Network Security Practitioner
🏅 ACP, APIsec Certified Practitioner
🏅 C)SA1, Certified Security Awareness 1
- BugOps, Advanced Bug Bounty Methodology
- OSINT Hunter, Ultimate OSINT Toolkit
- Hunt Toolkit, Advanced Reconnaissance Framework
- CVE-2025-55182-Exploiter, Proof-of-concept for a disclosed Next.js vulnerability
Note: the stats and streak widgets above are community-run services (they use your GitHub username automatically). They render fine on most profiles, but if any one of them looks broken or shows "no data", it's usually that service being temporarily down, not something wrong on your end. Worth a quick visual check after pushing.
"Security is not a product, it's a continuous process of learning, testing, and evolving."