I discovered and responsibly disclosed a high-severity session fixation vulnerability on zkteco.com. I verified that an attacker-controlled session ID persisted after authentication and documented the root cause, impact, and remediation.
At UptoSkills Virtual Internship, I’m performing web application VAPT and preparing vulnerability reports. At K7 Computing, I performed malware analysis and contributed to incident investigation workflows and security documentation.

