I specialize in web application and mobile security research with a primary focus on:
- Authentication & Authorization Bypass — OAuth flows, JWT weaknesses, session management failures
- API Security — REST API abuse, mass assignment, parameter pollution, cross-tenant IDOR
- Real-time Protocol Security — WebSocket authentication bypass, private event channel hijacking
- Secret Exposure — SSR framework leaks, JS bundle analysis, supply chain passive recon
- Mobile Security — Frida Gadget injection, SSL pinning bypass, APK analysis, gRPC interception
- Business Logic Flaws — Tenant isolation failures, privilege escalation, access control gaps
All research follows OWASP Top 10:2025 · CWE mapping · Responsible disclosure only
All research conducted under authorized bug bounty and VDP programs only. Responsible disclosure principles strictly followed across all engagements.
| Vulnerability | CWE | Severity | Platform | Status |
|---|---|---|---|---|
| Cross-tenant WebSocket authentication bypass — unauthorized private channel subscription across tenant boundaries via improper Pusher auth token issuance — real-time security event eavesdropping confirmed | CWE-284 | 🔴 High | Intigriti | Under Review |
| Server-side authorization bypass — cross-tenant write operations accepted with misleading 2xx responses bypassing tenant isolation controls | CWE-755 | 🟡 Medium | Intigriti | Under Review |
| Tenant workspace enumeration via distinguishable API error responses on authenticated endpoints | CWE-203 | 🟢 Low | Intigriti | Under Review |
| SSR framework secret exposure — production API token leaked in client-side state hydration — full read/write dataset access independently confirmed | CWE-798 | 🔴 High | HackerOne VDP | Independently Validated |
| Hardcoded blockchain service credentials exposed in public JS bundle — multi-network surveillance risk across 7 chains | CWE-798 | 🟡 Medium | Bugcrowd | Independently Validated |
| IDOR on financial ranking endpoint — private user financial data exposure | CWE-639 | 🟡 Medium | Bugcrowd | Independently Validated |
| RBAC failures · AI endpoint over-privilege · security misconfigurations across live production assets — mapped to OWASP Top 10:2025 | CWE-862, CWE-1336, CWE-693 | 🟡 Medium | NCSA Bug Bounty VDP | Certificate of Appreciation |
Web Application │ IDOR · XSS · SQLi · SSRF · CSRF · Auth Bypass · Business Logic
API Security │ REST abuse · Mass Assignment · Parameter Pollution · JWT Attacks
Mobile Security │ Frida · objection · APK patching · SSL pinning bypass · gRPC interception
Recon │ Subdomain enum · JS bundle analysis · SSR secret hunting · OSINT
WebSocket │ Auth bypass · Channel hijacking · Cross-tenant event eavesdropping
OAuth/Session │ State CSRF · redirect_uri bypass · Token leakage · Session fixation
Blockchain │ Smart contract recon · API key exposure · Web3 endpoint analysis
SIEM │ Wazuh — custom detection rules · alert correlation · log forensics
Threat Detection │ Honeypot deployment · botnet identification · DPI analysis
Malware Analysis │ Android static analysis · ML-based detection · behavior mapping
Core │ Burp Suite · Kali Linux · Postman · Nuclei
Recon │ Subfinder · ffuf · XnLinkFinder · Amass · httpx
Mobile │ Frida · objection · apktool · adb · apksigner
Analysis │ Wireshark · jwt.io · CyberChef · Shodan
Scripting │ Python · Bash · Docker
| Project | Focus | Impact |
|---|---|---|
| frida-ssl-bypass-setup | Non-rooted Android SSL pinning bypass — Frida Gadget injection methodology | Mobile Bug Bounty · CWE-295 |
| Supply-Chain-Secret-Hunting | SSR token exposure via passive JS bundle recon | CWE-798 · High · Independently Validated |
| NCSA-VDP-Assessment | Full passive VAPT — RBAC, AI over-privilege, misconfigs | Certificate of Appreciation |
| FUTURE_CS_03 | API Security — 9 vulnerabilities on OWASP crAPI | OWASP · CVE · MITRE mapped |
| android-malware-analysis | ML malware detection — Random Forest — 100% recall | Static analysis · scikit-learn · Python |
| SAIZERO-Cowrie-Honeypot | SSH honeypot — real botnet confirmed — Wazuh SIEM integration | Real-world threat intelligence |
| wazuh-nmap-detection | Real-time scan detection — TCP/UDP/ICMP — Level 15 critical alerts | Custom Wazuh rule engine |
| wazuh-homelab | Enterprise-grade Wazuh Manager & Agent homelab | Production-ready SIEM setup |
A01 Broken Access Control ████████████████████ IDOR · Tenant Isolation · RBAC Bypass
A02 Cryptographic Failures ███████████████░░░░░ JWT · Token Exposure · Weak Crypto
A03 Injection █████████████░░░░░░░ SQLi · XSS · SSTI · Command Injection
A04 Insecure Design ████████████░░░░░░░░ Business Logic · Auth Flow Design
A05 Security Misconfiguration ██████████████░░░░░░ API Keys · Headers · Debug Endpoints
A06 Vulnerable & Outdated Components ████████░░░░░░░░░░░░ Supply Chain · Dependency Analysis
A07 Auth & Identification Failures ████████████████░░░░ OAuth · WebSocket · Session Fixation
A08 Software & Data Integrity ████████░░░░░░░░░░░░ Webhook · Supply Chain · JS Tampering
A09 Security Logging & Monitoring ██████░░░░░░░░░░░░░░ Blind Spots · Error Disclosure
A10 Server-Side Request Forgery ██████████░░░░░░░░░░ Webhook Abuse · Integration Endpoints
| Credential | Issuer |
|---|---|
| 🎯 CICSA — Certified IT Infrastructure & Cyber SOC Analyst | RedTeam Hacker Academy |
| 🎯 National Cybersecurity Certification | NCSA Maldives |
| 🎓 BSc Computer Science | Alagappa University |
current_targets = {
"priority_1": "Mobile API surface — gRPC method enumeration via Frida",
"priority_2": "OAuth CSRF — state parameter validation bypass",
"priority_3": "SSRF via webhook and integration endpoints",
"priority_4": "JWT algorithm confusion — HS256 → none/RS256",
"priority_5": "Mass assignment on user profile endpoints"
}
methodology = "OWASP Top 10:2025 → Threat model → PoC → Responsible disclosure"
affiliation = "SAIZERO — Ground Zero Defence"
SAIZERO — Ground Zero Defence
Affiliated independent security research unit · Est. 2025
CyberLycan — Every shadow has a hunter 🐺