Across HackerOne, Bugcrowd, and Zerocopter, I reported 20+ valid vulnerabilities across fintech and SaaS programs, focusing on authentication bypass, IDOR, and business logic flaws. I documented findings with reproducible proof-of-concept steps and risk evaluations aligned with CVSS scoring.
My security research uncovered issues including a multi-factor authentication bypass, price manipulation, and an OAuth account-linking flaw that enabled repeated referral reward claims. I also found a financial vulnerability that allowed wallet balance manipulation and cash extraction through duplicate refunds.
I test web and Android application security using static and dynamic analysis, and have discovered vulnerabilities in platforms including Meesho, Sony, Vercel, and Amplify. I hold the AI Security Certificate from TryHackMe and have foundational knowledge of LLM vulnerability classes and prompt injection techniques.
