MERN Stack Intern at Luminar Technolab & independent Bug Bounty Hunter on YesWeHack. BCA student from Thrissur, Kerala — building secure, scalable web applications.
BCA student, developer, and security researcher — passionate about building things and breaking them (responsibly).
From crafting interfaces to hunting vulnerabilities — here's my toolbox.
Selected builds across full-stack development, security research, cloud learning, and practical experiments.
Real internships and independent security research on live programs.
Across cybersecurity, cloud computing, and artificial intelligence.
Open to internships in full-stack development and cybersecurity. Have a project, role, or idea? Drop me a message.
During targeted API security testing, analysis revealed that user-scoped resources (session auth tokens, organization billing records, and member permissions) were referenced via sequential and predictable tenant IDs without server-side validation against the requesting bearer token's tenant claim.
The enterprise security engineering team triaged the finding within 3 hours, verified full exploitation potential across 12,000+ customer records, implemented strict ABAC (Attribute-Based Access Control) filters with JWT tenant signature enforcement, and awarded a maximum critical bounty reward.