Gobesh Basumatary
@gobeshbasumatary
I uncover web and API security flaws through manual testing, reverse engineering, and adversarial research.
IndiaWhat I'm looking for
I'm a security researcher and freelance penetration tester who follows application behavior beyond intended flows to uncover weaknesses in web applications, APIs, and AI-powered systems.
I've traced authentication and registration flows to account-takeover paths, including an OTP/hash issue that exposed verification data. By manipulating object IDs and API requests, I've uncovered IDOR/BOLA exposure of PII, tickets, messages, documents, profiles, and application data.
I reverse-engineer JavaScript bundles and application logic to trace hardcoded keys, credentials, cryptographic material, source code, and internal configuration. I also built an RSA/AES decryption chain from exposed key material and independently confirmed SSRF through AWS IMDSv2 reachability.
I've reported production issues including exposed Git repositories, credential and configuration leaks, and plaintext OTP exposure through responsible disclosure channels including CERT-In. I also built Python tools for web vulnerability scanning and password-strength analysis.
Experience
Work history, roles, and key accomplishments
Penetration Tester / Security Researcher
Freelance
Jan 2024 - Present (2 years 8 months)
Conducted manual security testing and bug hunting, tracing authentication flows and API requests to uncover vulnerabilities such as account takeover, IDOR, SSRF, and exposed credentials. Reported issues through responsible disclosure channels including CERT-In.
Cybersecurity Intern
Elevate Labs
Sep 2025 - Nov 2025 (2 months)
Worked on vulnerability assessments and security investigations, analyzing security events and helping document findings and remediation.
Ethical Hacker Intern
InlighnX Global Pvt Ltd
Sep 2025 - Oct 2025 (1 month)
Tested web applications by tracing application flows, reviewing API behavior, and checking authentication and authorization controls for weaknesses.
Education
Degrees, certifications, and relevant coursework
Dibrugarh University
Bachelor of Technology, Computer Science and Engineering
Pursuing a Bachelor of Technology in Computer Science and Engineering, expected to complete in April 2026.
Barama College
Higher Secondary Certificate, Science
Completed higher secondary education with a focus on Physics, Chemistry, and Biology in July 2021.
Barama Higher Secondary School
Secondary School Certificate, General
Completed secondary education in June 2019.
Tech stack
Software and tools used professionally
Availability
Location
IndiaAuthorized to work in
Salary expectations
Job categories
Skills
Interested in hiring Gobesh?
You can contact Gobesh and 90k+ other talented remote workers on Himalayas.
Message GobeshGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
