One Hub. Unlimited Cybersecurity Testing Solutions

I am a person who likes hacking and everything related, I have passion for technologies and always learn new things. I have experience hacking systems, web pentesting, android, network pentesting, API, APT's etc.

IT Security Consultant, bounty hunter on online platforms, has found vulnerabilities in sites such as: Asus, Zoho, Dominos, Various Governments, Banks, in private programs, etc. PHP programmer, performing process automation tools.

Cyber Security is not just work for me, it’s my passion. It’s what’s keeps me up at night and wakes me up in the morning. Spend most of my time understanding breaking and fixing products and doing other security related research to overcome those vulnerabilities. I am a Penetration Tester, Bug Bounty Hunter and discovered vulnerabilities.

Sr. Pentester - Web - WebServices. - Análisis de microservicios. - Análisis de Apps (iOS/Android) Estáticos y dinámicos. - Análisis Perimetrales (Internos y Externos) - Red Team. Certificaciones CEH CPTE EJPT

I am an experienced pentester for 7 to 8 years in the cybersecurity industry. I'm conducting comprehensive penetration tests on web applications, network infrastructure, and APIs using various technologies. Adept at performing thorough source code reviews in languages such as C#, Node.js, Python, and PHP. Well-versed in leveraging security automations to automate tasks and enhance efficiency. Expertise in collaborating with diverse industries, including healthcare, financial, assurance, and gambling. I hold the following security certifications: OSCP, OSWP, OSCE, and AWAE.

I am Mukesh Kumar (MK) and working in cyber security field last 7 years. I have executed lots of overseas projects. currently, working as Lead security engineer. My expertise area is web, Mobile, network, thick client, API, cloud Security. I am holding some security certification like OSCP, CEH, eWPTx, Crest CRT, Crest CPSA.

Pentester with 9 years of experience in the security area. I have a master's degree in IT&C Security, as well as OSWP, OSCP and OSCE certifications.

I'm a Senior Cyber Security consultant with focus on penetration tests and red team engagements. Throughout my experience, I've helped security teams of several national banks, multinational corporations, government organizations and start-up products protecting against cybersecurity threats and increase their cybersecurity maturity. Over the years I've also managed to obtain several industry recognized certifications: OSCP, eCPTXv2, OSEP, OSWE, OSED and OSCE3.

I am an Application, Network and Cloud Security Expert performing network, web, mobile penetration testing and cloud security audit. I have a 9+ security consultancy experience and have found security vulnerabilities enterprises from mostly Telco, Finance and other industries as a day job. I have deep knowledge and understanding of security principles of Web and Mobile Apps. Additionally, I have a good experience on cloud security audit, container security and performed 30+ individual projects on AWS, Azure and GCP platforms. I hold OSCP, OSCE and AWS Cloud Security Specialist certificates.

OSCP, OSCE, OSWP, CRTO, AWS Cloud Practitioner, Microsoft O365 Security Administrator

Pentester / Security Engineer with 7+ years experience in White Box Web Application testing and Secure Code Review. Certifications include: OSCE, OSWE, OSEP, OSCP, GXPN.

I am an experienced Penetration tester with hands on experience in web application and infrastructure penetration testing. I've done more than 350 pentest projects as a lead. I'm on Bugcrowd and Hackerone bug bounty. I hold OSCP, eWAPT, eWAPTX certifications.

I have 8 years of experience as a penetration tester some of the most sought after companies. Besides the offensive side, I have a year experience in defensive approaches. I understand the root cause of vulnerabilities and can explain them to both technical and non-technical people. I hold eCPPTv2, eWPTXv2, Burp Suite Certified Practitioner, Mastering Burp Suite, Hacking and Securing Cloud Infrastructure certifications. Currently, I provide security consultancy to companies all around the world.

I am an application security engineer and bug bounty hunter with a focus on web applications and network penetration testing My achievements: Hall of fame - Yandex, Jenkins, Atlassian Published vulnerabilities - CVE-2015-5326, CVE-2015-7537, CVE-2015-7538, CVE-2017-18101 Public talks: Zeronights, You Shot The Sheriff, Confidence

Red teamer with 5 years of experience multiple industry certifications such as CREST CRT,CPSA, OSCP, CRTP, and CBBH. I have been on the defender's end and the attackers side as well. Have vast experience in leading security operations as well as red team engagements, Vulnerability assessment.

Hello, I have been a pentester for about 8 years. My main areas are infrastructural, web application, binary exploitation and WiFi. I currently hold OSCP, eCPPT, eWAPTX and eXCD certification.

- Assessing product security through white, gray or black-box penetration testing - Writing detailed, professional reports of my findings with clear and proven impact - Participated in the bug fixing process by engaging with developers - Found over 800 security bugs on many companies, including Amazon, PayPal, Goldman Sachs and Epic Games - Participated in over 150 pentest assessments - Source-Code Review experience of over 8 years - Certified with Offensive Security Web Expert

Bachelor’s degree in computer sciences. I have more than 3 years experience as a Penetration tester. As a penetration tester, I have worked on both small and large projects. Certifacetes: eWAPT, eWAPTXv2. I also have more than 7 years experience as a Sr. Software Engineer.

I have worked as a freelancer for 7+ years in Cyber Security and do collaboration with 280+ companies including big MNC's like Google, Microsoft, Apple, Intel, and many others. You can check my few works or recognitions here: Google - 817 Rank over the world Microsoft Apple Bugcrowd - 785th Rank over the world P1 warrior badge on bugcroud and hackerOne Reported: CVE-2024-25150

I am a security enthusiast who's always seeking to learn new technologies. My key area of focus is application security and I have been in this field for 8+ years now. I am also a Certified Information Systems Security Professional (CISSP). I have also presented my research at several prestigious conferences like BlackHat EU, Insomni'Hack, GreHack, etc. I have been acknowledged & rewarded by several tech giants like Apple, Google, Facebook, Microsoft, etc. for finding security vulnerabilities in their products.

Owned CVE-2022-21500 | CVE-2022-21567 very experienced by finding critical bugs (Server side bugs , sensitive data expose) HOF 100+ company’s

I'm a security researcher with experience more than 3 years and have worked with many tech giants like Walmart, Etsy, Aircall, Privacy (Virtual Card Service), Opera, Latitude Financial Services and many more through Bugcrowd and Hacker one.I have also worked for many private programs.I do my work both manually and by automation. I have developed tools to make my workflow easier and simple. I love to dig deeper and find the weaknesses that developers leave unsafe.

Hello Hiring Team, Here are my profile highlights for your reference: 1. For 2+ years, I have worked for companies in Security Consulting and now currently working with HackerOne as Pod Lead (Triager) with experience in managing 200+ Bug Bounty Customers. 2. Published Articles for Project Discovery, Halborn, and have Co-Authored a Book on Cyber Security. 3. Strike Core Pentester and selected as Top 10 Pentester for 2022 Q4. 4. Holding certifications such as eWPTX, eCPPT, and AWS Solution Architect.

French senior Pentester - BugHunter - Security Risk Auditor With around 20 years of professional practice in IT Security (Offensive Security, Cloud Security, IAM, DevSecOps). Ranked 1st on Yogosha, top 15 in YesWeHack platforms.

Cyber Security and Information Security professional with more than 11 years of progressive experience. Proficient in managing and performing all the types of Penetration Testing engagements such as Web and Mobile Application Security, Infrastructure/Network Pentest and Configuration Audits, Red Teaming, Social Engineering, Architecture Security, and Source Code Reviews.

I've extensive experience as a Lead Penetration Tester, 7 years full time, also working as a freelancer in my free time. I've worked with Banks, Insurance companies, Start-ups, Governmental organisations, among others. Certifications: OSEP, WPTXv2, CRTP, Practical approach to Malware Analysis and Memory Forensics, OSCP.

As a Senior Information Security Researcher, I bring with me over 8 years of diverse experience working in various industries such as banking, insurance, healthcare, and telecom. My expertise lies in Web applications, where I have identified and reported critical security issues on major platforms such as Google, Stripe, VMware, and Salesforce.

Listed at more than 100 companies hacker's hall of fame. Ranked as one of top 50th hackers (All time) at hackerone.

OSCP certified with over eight years of experience in the field of cybersecurity, I have honed my skills as a Senior Penetration Tester, adept at conducting comprehensive application and network vulnerability assessments as well as penetration testing. My expertise extends to performing in-depth vulnerability analysis for web applications, mobile apps, and networks, identifying intrusion or incident paths and methods, and pivoting and escalating privileges to assess an organization's security effectiveness.

I have a diverse technical background with 16 years in IT and software industry. Lead Penetration Tester who has led over 80 successful penetration testing engagements, identifying over 550 vulnerabilities. Proficient in pentesting web applications, APIs, mobile apps, desktop apps, internal and external networks, and cloud configurations. Whitehat security researcher featured as a Top hacker and received several honorable mentions from sites like Google, Github, Prezi, PayPal, Cobalt, HackerOne etc.

Experienced cyber security professional with 6+ years of experience in Project like Medical device ,ICS Security,Automotive(TARA),IVI,OEM pentesting Master’s in System Security(SICSR) Skills Accomplishment Received CVE’s on Smart BLE BP machine(Medical device) CVE-2020-27373,CVE-2020-27374,CVE-2020-27375,CVE-2020-27376 Received CVE’s on Electric Vehicle (E-bike) CVE-2022-30467 ,CVE-2022-30466

Experienced Security Engineer and part time bug bounty hunter with 4.5 years of experience and a proven knowledge of Web, Android, iOS, Network VAPT, and System Hardening. I am proficient in programming and have a keen inclination towards application. As a part of my work, I have been conducting Embedded Product Security Assessment, Web Application Security Assessment (including API Pentesting), Android application testing, Wireless exploitation as well as Industrial Control Systems protocols flooding and fuzzing. Currently OSCP.

Currently working in this penetration testing domain with an overall experience of more than 10+ years. Performing and leading several types of Penetration Testing engagements such as Web Application Security, Mobile Application Security, Infrastructure Penetration Testing, Network Configuration Audits, Red Teaming, Social Engineering, Architecture Security, and Source Code Reviews. Have achieved certifications such as OSCP (Offensive Security Certified Professional) and CEH certified. Contributed to community and got acknowledged in 100+ hall of fames.

I work as a security researcher and have 7 years of experience in the information security domain. My expertise includes web application, infrastructure, mobile application, thick client, IoT penetration testing, source code review, and cloud config. Over the course of my career, I have published several advisories such as CVE-2019-16667, CVE-2019-17590, CVE-2020-15018, CVE-2020-12255, CVE-2020-12256, CVE-2020-12257, CVE-2020-12258, CVE-2020-12259, CVE-2020-14412, CVE-2020-14413, CVE-2020-14414, CVE-2020-25262, and CVE-2020-25263.

I am an information security professional having an overall experience of 5 years in vulnerability assessment and penetration testing space. I currently hold OSCP, eWPT, ePPT, CEH certifications. I'm testing on web applications, APIs, internal and external network infrastructure. I am also a Bug Bounty hunter. I hunted on different platforms and was able to find various bugs from OWASP top 10 including SQLi, XSS/HTMLi, Information disclosure, BAC and so on.

I have been professionally pentesting for financial large financial institutions in the United States for over 7 years and free lance pentesting non-financial institutions for 3 years. I have a specialty in web application penetration testing but plenty of experience doing internal and external network pentesting as well. I hold nearly the full Offensive Security certification stack (OSCP, OSCE, OSWP, OSWE) along with a majority of the SANS pentesting certification stack (GWAPT, GXPN, GMOB, GCPN).

Experienced Penetration Tester with a demonstrated history of working in the computer and network security industry. Skilled in Python, Analytical Skills, Splunk, Snort, and Penetration Testing. Strong professional graduated from Cyber Academy Specialised in Web Application Testing proved by findings in billion dollar companies like Apple / Google / Microsoft / Dell / Sony / Amazon / Walmart and more. Currently Ranked #1 in BMW Group Bug Bounty Program

I have been working as a cyber security consultant since 2015. So far I have performed internal, external, web application, API, mobile application, SOE, thick client and wireless penetration tests in various banks, fintech firms, government and various corporate environments.

More than 4 years of experience as a Security Researcher and Penetration Tester with extensive knowledge of Bug Hunting. Good Understanding of Web Applications and Networks. Apart from professional experience, have a deep passion and diligence for hacking, and finding new bugs and vulnerabilities. Strong information technology professionals work with many tech giants & help them to fix their critical security issues. Certifications: - Certified Ethical Hacker - CEH v11 (Practical)

Developer oriented to cybersecurity, automation, AI, over 10 years experience as my passion, not just a profession. Wide experience on Blackbox, Greybox, Whitebox, Red Team, remote or physical hacking through hardware intrusion devices. Successful reports to governmental systems, banking, eCommerce (Amazon), mail servers (Hotmail, Zimbra), cryptocurrency exchange (Uphold), airlines, etc. I can bring you both perspectives, an attacker compromising your system and a developer with enough knowledge and experience who understands the application logical structure to solve all presented issues.

Security professional with over 10 years of experience in the security domain across various industries such as Finance, Insurance, Telecom, and government. I am having an extensive hands-on experience in performing security testing (Web, Mobile, Infrastructure), security architecture, vulnerability assessment /penetration testing, calculating risk and resource management. I am also an author of “CIS Security Benchmark” for MongoDB Database and Private Bug Bounty Hunter.

Information security professional having an overall experience of 8+ years in vulnerability assessment and penetration testing space and has an experience on a variety of applications and technology platforms including banking, retailer sector, telecom etc. I also have an experience in attending the international clients, on-site project execution, report writing, process improvement, team management, etc. I currently hold OSCP, CRTP, CREST, CEH certifications.

I am always studying methods, tactics, and strategies used to circumvent computer security. During my work and research, I was able to find and help fix hundreds of vulnerabilities that could give an attacker unauthorized access to computer systems at some of the largest corporations and institutions on the planet, such as Google, Facebook, Paypal, Microsoft, Apple, US Department of Defense and The Pentagon. Forbes Under 30.

I worked as a security specialist on several companies with 7 years experie. I have specialized in penetration testing, web application security and mobile security. I experienced Penetration Tester and Security Researcher with a demonstrated history of working in the telecommunication and finance industry. I skilled in Web Application Security, Mobile Application Security, Web Service Security, Source Code Review, Vulnerability Management, Red Teaming. I hold OSCP, OSWE, OSCE, eWPTX certifications & CVEs.

Penetration tester and Red teamer for Peru, Colombia, Panama, El Salvador, Pakistan, USA and Europe with ten years of experience. Focused on the bank sector and retail. I’ve worked with standards such as PCI DSS, HIPA, HITRUST, SOX, SWIFT and methodologies such as OSSTMM, OWASP, MITRE ATT&CK etc. in adversary simulation, and threat emulation Source code evaluator in Java, C/C++, Python, PHP, .NET, Javascript etc Official trainer for CISCO, EC-COUNCIL and mile2. Certified in OSCP / EWPTX/ EWPT / EMAPT International Speaker in Argentine, Panama, El Salvador, Costa Rica, Ecuador and Peru.

I am a professional in the field of offensive security with over 10 years of invaluable experience. Widely recognized and respected within the cybersecurity community, I have made a lasting impact through the discovery and responsible disclosure of numerous vulnerabilities to major tech giants such as Google, Apple, US defense department, Meta (Facebook/instagram), Amazon, Microsoft, Teamviewer, ProtonMail, and PayPal.

Cyber Security Professional with 6+ years experience in Appsec Testing including Web, APIs, Mobile & Network Penetration testing. Performed 300+ asset audits. I have worked to help secure various Industries & Sectors including BFSI, Healthcare, Telecommunication, etc. Have a good experience working closely with Dev/Tech/Business teams to understand the problem statement and thus provide an appropriate solution for the same. Hold multiple Certifications like OSCP, CREST CRT, CREST CPSA & CVEs like: CVE-2019-12744, CVE-2019-12745, CVE-2019-12801, CVE-2019-12932

I worked as a Penetration Tester for more than 10 years, both for consulting companies and internal companies security. I obtained security certifications such as OSWE, OSCP or CISSP. I have hands-on experience in most security related activities and I enjoy learning new things as well as blogging about them or presenting at conferences (e.g. Defcon, Blackhat Arsenal, OWASP). I have a personal technical blog, I have a few open-source projects, I am the administrator of the largest security community in Romania and I am active on Twitter.

I'm a professional in the field of offensive security with over 10 years of invaluable experience. Widely recognized and respected within the cybersecurity community, i have made a lasting impact through the discovery and responsible disclosure of numerous vulnerabilities to major tech giants such as Google, Meta (formerly Facebook), Mozilla, Microsoft, Teamviewer, ProtonMail, and PayPal.

Spider Defender here, with 9 years in cybersecurity. Worked across banking, healthcare, fintech, as a freelancer pentester for various global clients. Executed 1000+ pentests in last 9 years, skilled in Web Apps, Network, Cloud Security, with OSCP & AWS-SCS. Furthermore, I possess an adept proficiency in Cloud and Containers Configuration review, a facet crucial in orchestrating impregnable security paradigms. Should the need arise, I am primed to provide an adept threat modeling service, ensuring comprehensive protection against potential vulnerabilities.

I am a cybersecurity professional with over 3+ years of experience in the domain of Application Security and Penetration Testing. I have a strong passion for security and have extensively worked on Web & Mobile Applications, APIs, Thick Client Applications, and Internal & External Infrastructure. I actively take part in various crowd-sourcing platforms, where I engage in a diverse range of application security testing. I also hold esteemed certifications like CREST CPSA, OSWE, and OSCP, and keep myself up-to-date with the latest trends and vulnerabilities.

He is a dedicated offensive security guy for more than 20 years working for companies such as Open Sec LLC (Research Lead), Cobalt Labs Inc. (Lead and Pentester), MilliMicro Systems Inc.(Trainer) right now. Also, he participated as speaker/trainer in during security conferences (DEF CON 26, DEF CON 28, Ekoparty 2015,2017,2019,2021,2022, OWASP regional and local conferences, etc.) and private training for several companies and army forces from US and Perú.

I have over 15 years of experience in Information Technology and Information Security. I was a developer, administrator, devops, security officer, team leader and pentester (mainly in financial and consulting industry). I hold BSc and MSc in Software Engineering from the Warsaw University of Technology. I have experience in a numerous security area, such as infrastructure penetration testing, security source code review, application and API security testing, mobile security testing and code assisted penetration testing. My certifications: OSWE, OSCE, OSCP, eWPTX, CISSP, CISM, CISA and more.

- 12 years of experience in multiple Cyber Security domains and context as Software/Security engineer, Security Manager and CISO. - I worked on different projects such as Vulnerability Management Program, Penetration test / Vulnerability assessment, Secure Code Review, Security by Design Framework, Threat Modeling. - Continuous learning attending training and certifications (OSCE/OSCP, OPST, eWPT, 27001 Lead Auditor, Prince2), participating in Bug Bounty programs, and finding vulnerabilities on open source software (e.g. CVE-2017-8114).

I am an engineer from Pakistan, I really love finding security issues and currently author of Ghauri (An Advanced SQL Injection Automation tool) including many more utilities, Acknowledge by companies like OPPO mobile, Walmart and many others for reporting security issues on their assets

I'm M'Baku Defender, with over 5 years of bug bounty hunting experience. I've contributed to the security of various enterprises, such as Walmart, Lenovo, and media24, through bugcrowd and private initiatives. Proficient in automation, I've developed tools to streamline my bug bounty workflow. One notable tool is xsstool, instrumental in identifying and reporting multiple XSS and account takeover vulnerabilities across bugcrowd and other private programs.

Penetration tester and security researcher with more than 7 years of offensive security work experience: - Speaker at 13 international information security conferences (including Blackhat) - Ex-Amazon Penetration tester - Currently: Offensive Security Team Leader - "MyGames" - Discovered 22 CVEs (most of them are critical) - OSCP & OSEP certified - Master's degree in Information Security (BMSTU university 2016-2022) - Author of security articles with more than 30-70k views each. - Captain of infosec team Invuls (top-3 of Standoff 2021 & 2022, winners of IoT CTF DEFCON 28 & 29)

Experienced with 7 years in Offensive Security, customer-centric leader at a top consulting firm. Proficient in banking, finance, retail, education, eCommerce, wallet, etc. Holds OSCP, eWPTXv2, CPAZ, CPNA, pursuing CRTO, PNPT, Burpsuite '23. Expert in identifying/resolving vulnerabilities, safeguarding client systems/data. Known for innovative solutions to complex challenges, building lasting client relationships, and empowering a collaborative team for exceptional results. Passionate about cybersecurity trends.

An Electronics Post Graduate and a Security Professional with 2 years of hands-on experience in conducting vulnerability assessment and Penetration testing of commercial and enterprise solutions including Web, Mobile, API, Thick Client, Network as part of my current job role. Apart from my role as a Security Consultant, I am also an Active bug bounty hunter and usually hunt on platforms like Bugcrowd & Synack and have discovered vulnerabilities in multiple VDP and VRP engagements.

- More than 15 years of experiencie. - I use my own scripts to perform penetration tests (not only the typical automatic scans). - I use agreed-upon time windows with the client for conducting the penetration tests. - The report includes: 1. Security level of the organization. 2. Evidences. 3. Remediations.

I am a Security Researcher with 8+ years of experience in the application security stack that includes Offensive security research of Web & Mobile Application (Android and iOS) along with proficiency in red team operations that include successfully circumventing EDR systems, including CrowdStrike and Cortex, among others and comprehensive. Cloud deployment Security (Onprem, AWS, GCP, Azure) assessments, I am also actively involved in bug bounties (Synack - Top 100, BugCrowd -Top150 Worldwide) and vulnerability research in my free time. Listed on Hall of Fame on all leading companies like Apple , Microsoft, Google and many others.

I wanted to share a bit about my background and experience in Penetration Testing. With over 5 years of experience in this field, My areas of specialization encompass Web applications, Mobile (iOS/Android) Applications, APIs, Network, and Thick/Desktop Client Testing.

Hello Eitri Byte here, a Red Team Security Consultant with more than 5+ years of hands-on experience in conducting vulnerability assessment and Penetration testing, I've delivered 200+ Pentest assessments across a wide range of systems including Web, Mobile, API, Thick Client, Network and As part of my current job role I have extensive experience in web application penetration testing, I specialize in DAST, SAST, and IAST methodologies for comprehensive security assessments. Apart from my role as a Security Consultant, I am also an Active bug bounty hunter and usually hunt on platforms like Bugcrowd, Hackerone, and Synack. Over the years, I have discovered multiple critical security vulnerabilities in tech giants and have been listed in 70+ Hall of Fame from various top-tier companies including Microsoft, Apple, Google, Zoom, Okta, Canva, Atlassian, Dell, and many others. I am excited to bring my skills and experience to this team and collaborate with all of you professionally.

Working as a Senior Security Analyst with having total 6+ years of experience, with expertise in Web and Mobile Application Security, API Security, Network Security, Thick Client and Citrix Security, etc Have completed several certificates such as CEH, eWPTx and CRTP and Active member on HackTheBox

I'm a Certified Penetration Tester with distinguished credentials such as OSEP, CRTO, OSCP, and Burp certifications. I combine a rigorous analytical mindset with a keen understanding of systems' vulnerabilities to protect and secure digital landscapes. With my advanced technical skillset, I thrive on identifying and mitigating potential threats, ensuring robust and reliable defense mechanisms. Committed to staying ahead of cutting-edge hacking methodologies, I am continuously expanding my expertise and honing my techniques to meet ever-evolving cybersecurity challenges.