Open to opportunities

Akif ali Khan

@akifalikhan

Message

I build offensive security tools and uncover web, network, and AI application vulnerabilities.

India

Message

What I'm looking for

I'm looking to apply my penetration testing, vulnerability research, red teaming, and security-tool development experience to help teams identify and remediate web, network, and AI security risks.

I've conducted vulnerability assessments and penetration tests for the Indian Army, producing risk-rated reports and remediation guidance for internal networks and web applications. As an independent bug bounty researcher, I've earned 10+ international Hall of Fame recognitions for findings including XSS, account takeover, IDOR, insecure file upload, and authentication bypass.

I build security tools such as RedHawk, an automated red-team reconnaissance framework that reduced manual recon time by about 70%, PhishGuard, a phishing detector with 95%+ accuracy, and an LLM vulnerability scanner aligned to the OWASP Top 10 for LLM Applications. I'm a B.Tech Computer Science student and a Medallion of Excellence recipient at India Skills Nationals, with gold medals at India Skills Regional and Odisha Skill Competition 2026.

Experience

Work history, roles, and key accomplishments

Current

BugBounty Researcher

Current

Independent

Jan 2024 - Present (2 years 7 months)

Identified and disclosed vulnerabilities across multiple bug bounty programs, earning 10+ Hall of Fame recognitions internationally. Reported XSS, Account Takeover, Insecure File Upload, IDOR, and Authentication Bypass through systematic reconnaissance and PoC development.

Bug Bounty XSS Account Takeover Insecure File Upload IDOR PoC Development

VAPT Intern

Indian Army

Conducted vulnerability assessments and penetration testing on internal networks and web applications under the supervision of Army cybersecurity personnel. Prepared detailed VAPT reports with risk ratings and remediation recommendations.

Vulnerability Assessment Penetration Testing Web Application Security Network Security Threat Analysis Report Writing

Phishing Page Detector Developer

Independent

Developed a real-time phishing detection tool analyzing URLs and HTML structure via heuristic rules and a trained Random Forest classifier (95%+ accuracy). Integrated VirusTotal API for domain cross-referencing and built a Flask dashboard for analysts.

Python Flask Machine Learning Random Forest Heuristic Analysis Web Security

Red Team Recon Framework Developer

Independent

Built a modular recon framework automating subdomain enumeration, port scanning, service fingerprinting, and OSINT aggregation into a unified JSON/HTML report. Integrated Shodan API and theHarvester for passive intelligence gathering, reducing manual recon time by ~70%.

Python BASH Shodan TheHarvester Fingerprinting Services OSINT Automation

LLM Vulnerability Scanner Developer

Independent

Built an automated scanner to assess Large Language Model deployments against the OWASP Top 10 for LLM Applications, covering risks such as prompt injection and insecure output handling. Designed a FastAPI backend served via Uvicorn to run configurable test suites.

Python fastAPI Uvicorn OWASP Top 10 For LLM Applications Security Prompt Injection Vulnerability Assessment