โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ•—
โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•‘
โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘
โ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ•šโ•โ•โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘
โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•—     โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ•šโ•โ• โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘
 โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•  โ•šโ•โ•     โ•šโ•โ•โ•šโ•โ•     โ•šโ•โ•โ•šโ•โ•โ•šโ•โ•  โ•šโ•โ•โ•โ•

    [ PENETRATION TESTER & SECURITY RESEARCHER ]
root@0x4min:~#  |

[ABOUT]

Offensive security researcher with 2+ years of hands-on experience in web application pentesting, network security, and bug bounty hunting. I find and report vulnerabilities before bad actors do โ€” across web apps, APIs, mobile applications, and internal networks.

I write technical research and CTF writeups on Medium, build custom security tooling in Go and Python, and continuously sharpen skills on HackTheBox. My work spans everything from XSS to Active Directory exploitation to Android app security research.

[SPECIALIZATIONS]

๐ŸŽฏ Web Application Security โ€” SQL injection, XSS/BXSS, SSRF, XXE, deserialization, JWT attacks, OAuth flaws, IDOR
๐Ÿ“ฑ Mobile Security โ€” Android APK analysis, SSL pinning bypass, root/emulator detection bypass, Frida instrumentation
๐ŸŒ Network Penetration Testing โ€” Internal/external assessments, Active Directory exploitation, Kerberoasting, lateral movement
๐Ÿ”ด Red Team Operations โ€” APT simulation, phishing campaigns, C2 infrastructure, social engineering
๐Ÿ’ฐ Bug Bounty Hunting โ€” Responsible disclosure, HackerOne & Bugcrowd platforms, critical vulnerability research
๐Ÿ“ก OSINT & Reconnaissance โ€” Subdomain enumeration, passive recon, target profiling, attack surface mapping
๐Ÿ† CTF Competitions โ€” Web exploitation, pwn, reverse engineering, forensics challenges
๐Ÿ”ฌ Tool Development โ€” Custom exploit tooling in Python and Go, automation frameworks, OOB/BXSS infrastructure

[CONTACT]

Want to collaborate on security research, discuss a vulnerability, or explore working together?

โ†’ About & Contact