Independent Security Researcher
Independent Security ResearchSelf-Employed / Independent Security Research·Remote
2023 : PresentCurrent
Key responsibilities and scope
- ›Conducting vulnerability assessments and manual security reviews across web, mobile, and API systems.
- ›Investigating adversary infrastructure, remote access trojans (RATs), and illicit cybercrime channels across Telegram and dark web forums.
- ›Analyzing payment gateway fraud mechanisms (Stripe card fraud) and unauthorized wallet balance transaction vectors.
- ›Responsibly disclosing validated security findings to corporate security teams to safeguard customer accounts.
Verified outcomes
- ✓Bewakoof: Discovered and helped remediate three critical vulnerabilities: an IDOR exposing customer wallet data, broken mobile number-verification allowing OTP redirection to attacker-controlled numbers via Burp Suite request tampering, and an active legacy email-login endpoint bypass enabling full account takeover (ATO) and wallet balance theft.
- ✓Vulnerability Reporting: Investigated and responsibly disclosed confirmed security vulnerabilities affecting Clovia, Marks & Spencer (London), and Cadbury.
- ✓RedBus: Investigated adversary wallet-balance exploitation schemes involving compromised agent accounts and delivered detailed forensic reports.
- ✓Payment Fraud Analysis: Contributed intelligence to an investigation analyzing syndicated credit card fraud on Stripe driving chargeback losses and processor penalties.
- ✓Cyber Threat Intelligence: Monitored and analyzed Telegram-based threat actor groups abusing Flipkart PayLater; mapped operational networks and unmasked key exploit brokers and RAT operators.
Burp SuiteAPI SecurityOWASP Top 10OSINTThreat IntelligenceNetwork SecurityPythonIncident Response