Arshad Shaik

I’m a cybersecurity professional with 3 years of experience in ethical hacking and bug bounty hunting. I focus on finding and reporting security vulnerabilities across various platforms, with a track record of successful contributions to multiple bug bounty programs.

I conduct penetration testing and vulnerability assessments for customer-facing products and websites, including APIs. I deliver detailed reports with actionable mitigation strategies, supported by tools like Burp Suite, Nmap, DirBuster, Nuclei, Nessus, and Shodan.

My web application security work covers OWASP Top 10 issues and real-world weaknesses such as IDOR, rate limiting, CORS, privilege escalation, file upload vulnerabilities, and session management issues. I also assess server misconfigurations and have experience exploiting and mitigating host header injection.

I’m detail-oriented, analytical, and eager to learn new tools and technologies. I’ve reported 250+ valid vulnerabilities, earned over $10,000, and received Hall of Fame recognition through impactful security research while collaborating with organizations such as NASA and Achema.