Cybersecurity professional and MEAN stack developer with hands-on experience in penetration testing, network security, and LLM/AI security practices. Founder of Dev Tech Plus, providing security consultancy and full-stack development. Active bug bounty hunter, instructor, and open-source contributor focused on building secure infrastructure tools and protecting modern web application environments.
| Category | Skills & Technologies |
|---|---|
| Security | Penetration Testing, Vulnerability Assessment, Burp Suite, Identity & Access Management (IAM), Network Security (NAT/PAT, ACLs), Firmware & Reverse Engineering, AI/LLM Security |
| Programming | C, C++, JavaScript (ES6+), PHP, Python |
| Full Stack (MEAN) | MongoDB, Express.js, Angular, Node.js, REST APIs, HTML5, CSS3 |
| Platforms & Tools | WordPress, Linux (BlackArch), Cloud Security, Cisco NAT/PAT Configuration, Git |
| Content & Strategy | Project Coordination, Technical Content Strategy, Community Management |
May 2021 – Present
- Deliver freelance penetration testing and vulnerability assessment services across web, network, and infrastructure environments.
- Apply security methodologies to identify and remediate vulnerabilities for client platforms.
- Scope client engagements, communicate technical risks, and meet delivery milestones independently.
2021 – Present
- Founded and manage a technology/security consultancy providing software development alongside infrastructure security testing.
- Lead development of CloudSphere Hypervisor Platform (v2.4), a multi-node VM and LXC container management platform enabling unified monitoring and orchestration across macOS, Windows, and Linux.
- Built a zero-dependency Python telemetry agent enabling real-time CPU/RAM stats and safe remote execution behind NAT/CGNAT networks via outbound HTTP polling.
- 🎯 Active Bug Bounty Hunter on HackerOne & YesWeHack — featured in 18+ Halls of Fame
- 🛠️ Architecting open-source security tools for the cybersecurity community
- 📹 Creator at B1scuit Security on YouTube — technical hacking tutorials & security writeups
- ✍️ Technical writer on Medium covering bug bounty strategies, POCs, and security tips
- 🎓 Udemy Instructor teaching 8,400+ students
- 💬 Lead a Discord community for security researchers and developers
| Target | Severity | Vulnerability Type |
|---|---|---|
| 🔵 Supabase | 🔴 High | BAC + Insecure API (Rate limiting & input flaws) |
| 🟠 Zerodha | 🔴 High | Android + Business Logic + Security Misconfigurations |
| ⚫ Cert-wm.nl | 🔴 High | Stored XSS via Unrestricted File Upload |
| 🟣 Thinkst Canary | 🟡 Medium | Mass PII Leak |
| 🟢 Substack | 🟡 Medium | Race Condition — Atomic Increment Manipulation |
| 🟢 GeeksForGeeks | 🟡 Medium | Mass Assignment Vulnerability |
| 🔵 Wibmo.com | 🟡 Medium | IDOR — Email Disclosure |
| 🟠 EC-Council | 🟡 Medium | Email Verification Bypass |
| 🟤 Inflectra.com | 🟡 Medium | Open Redirect + PII Leak via Input Validation Flaw |
| 🟣 Skillmate.ai | 🟡 Medium | Security Bypass + Insecure API |
| 🔵 Samsung | 🔵 Low | Misconfigured AWS S3 Bucket — Data Leak |
| ♟️ Chess.com | 🔵 Low | CWE-657: Insecure Design Violation |
| 🟠 Arcjet.com | 🔵 Low | CWE-657: Insecure Design Violation |
| 🏥 CK Birla / Ganga Ram / Max Healthcare | 🔵 Low | Security Bypass + Insecure API |
💰 Earned $1,000+ bounty via a private YesWeHack program for critical findings in an Android application's Forgot Password flow.
- Certified LLM Security Expert (CLLMSE)
- Introduction to Microsoft 365 Copilot - Microsoft Learn
- Cybersecurity Job Simulation - Mastercard (Forage)
- My OPSWAT Portal Orientation Guide & Introduction to CIP - OPSWAT Academy
- Burp Suite Pentester - Dev Tech
- MERN Full Stack - TECHLEARNER
Nancy International School, New Delhi
- Secondary & diploma-level coursework covering Computer Games, Programming Skills, and Web Development.
