VAPT | API Security | Bug Bounty

Finding Vulnerabilities in Websites
Just $20

Hands-on experience in Vulnerability Analysis & Penetration Testing. Skilled in OWASP Top 10, Burp Suite and Python.

Explore Work Contact Me
Web & API Security
XSS | IDOR | BOLA | Logic flaws
PortSwigger 35+ labs Custom Cybersecurity Tools OWASP Top 10

Technical Arsenal

Tools, languages and frameworks I use daily

Vulnerability Analysis & Penetration Testing

Burp Suite, parameter abuse, excessive data exposure, authentication bypass, XSS, SQLi

Networking & OS

HTTP/HTTPS, TCP/IP, DNS, Linux

Programming

Python, JavaScript, automation scripts, custom security tooling

Featured Security Projects

Open-source tools and dashboards I built

XSS Labs

Cybersecurity Labs

xss-labs for learning web application security. Each lab demonstrates a different XSS vulnerabilities.

Website

Vulnerable Login Form

Vulnerable Web App

Vulnerable Shopping Cart is insecure e-commerce application designed for cybersecurity education.

Website

Vulnerable Shopping Cart

Vulnerable Web App

A deliberately vulnerable login form designed for security education and training.

Website
View All Projects

Writeups

I document real-world bug bounty findings, Penetration Testing techniques. Read my latest blogs on dev.to and personal blog.

Explore All Writeups
Exploiting IDOR in modern APIs
Step-by-step bypass techniques
XSS to account takeover: a real case
Bug bounty walkthrough
CORS misconfiguration deep dive
Tooling and detection

Certifications

  • Ethical Hacking Essentials (EHE)
  • PortSwigger Web Security Academy - 35+ labs solved
  • OWASP Top 10 practitioner

Bug Bounty Highlights

  • Reported XSS, IDOR & logic flaws on live programs
  • Clear reproducible PoCs with requests and screenshots
  • API pentesting: BOLA & excessive data exposure