Open to opportunities

Sarthak Chauhan

@sarthakchauhan2

Message

Cybersecurity engineering student building security tools through ethical hacking and VAPT.

India

Message

What I'm looking for

I’m looking for a security-focused role where I can keep reporting and fixing real-world vulnerabilities, work on application security and threat modeling, and build practical security tools alongside engineering.

I’m a cybersecurity engineering student at National Forensic Sciences University, and I work across ethical hacking, vulnerability assessment, and security research while building security-focused tooling. Through bug bounty programs on HackerOne and international targets, I’ve reported real issues on production systems, including broken access control and cross-user data exposure.

In my independent security research, I’ve also investigated mobile API weaknesses and identified sensitive secrets embedded in production Android apps via reverse engineering. I pair this with hands-on development—like an ELA + CNN JPEG tampering detector and a FastAPI credential breach checker that keeps passwords from leaving the device in plaintext.

Experience

Work history, roles, and key accomplishments

Current

Independent Security Researcher

Current

HackerOne & Com Olho

Jan 2025 - Present (1 year 6 months)

Discovered critical vulnerabilities including broken access control in Max Healthcare exposing 10.8 million patient records, unauthenticated prescription upload in Maxlab Healthcare, and hardcoded cryptographic keys in Bykea's Android APK.

Vulnerability Assessment Penetration Testing Application Security Reverse Engineering Burp suite Static Analysis