At CyberSmithSecure, I conducted web application penetration testing across seven enterprise client projects, identifying more than 70 vulnerabilities ranging from Critical to Low severity. I found issues including authentication bypass, privilege escalation, Stored XSS, IDOR, business logic flaws, and arbitrary file upload.
I assessed SaaS, fintech, cloud, IoT/surveillance, and HR platforms, and contributed as a Web Team Member to CyberSmithSecure's CERT-In Empanelment Audit. After my internship, I continued with the organization as a Jr. Security Analyst, contributing to security assessments and vulnerability management.
I'm also working on ZKAuth, an in-progress zero-knowledge identity provider designed to authenticate users without transmitting or storing passwords. It includes SRP-style proofs, an OAuth-style authorization code flow, RS256 JWTs, Redis-backed identity sessions, and device binding.
