Dekku Researcher

Cybersecurity professional with hands-on experience in offensive security, vulnerability research, and SOC operations. Independently identified and responsibly disclosed 10+ critical vulnerabilities (RCE and XSS) across live production environments, earning paid bounties and vendor acknowledgements. Actively hunted bugs across 7-8 VDP programs during internship, studied real-world attacker techniques in sandboxed lab environments, and built detection skills around phishing, malware analysis, and secure OS configurations.

Skilled with Burp Suite, Nessus, ELK Stack, and MITRE ATT&CK. Self-taught and certification-backed, with a track record of turning real-world security research into verified, tangible results.

Independent Security Researcher at Self-Directed (2026-01 – Present)

Researching internet-facing web applications for exploitable vulnerabilities with focus on responsible disclosure and real-world impact assessment.

• Identified and validated 10+ critical React/Next.js RCE exposures in live production environments. Conducted reconnaissance, controlled PoC validation, and prepared structured technical disclosure reports.
• All disclosures made directly to vendors with no third-party bounty platforms. Targets include Neosapien, Cyparta, and programs across e-commerce, hotel, portfolio, and project management sectors.
• Collaborated with a team of three researchers to map attack surfaces, reproduce findings, and validate risk before submission.
• Outcomes: paid bounty rewards, vendor acknowledgements, remediation confirmed, and a formal recognition certificate received.

Cybersecurity Intern at Blackroot Technologies (2024-04 – 2024-10)

• Actively hunted bugs across 7-8 VDP programs. Identified and reported 8+ web application vulnerabilities including XSS, session management flaws, and information disclosure issues.
• Performed structured vulnerability assessments using Burp Suite, Nessus, and SQLMap. Documented findings with technical write-ups and reproduction steps.
• Studied attacker techniques in safe lab environments: explored malware behaviour, APK/EXE binding methods used to backdoor legitimate files, and how attackers gain access to victim machines.
• Practised phishing attack setup and detection workflows. Analysed suspicious files and indicators of compromise using VirusTotal and related tools.
• Explored OWASP Top 10 vulnerabilities through hands-on testing. Evaluated secure and privacy-focused OS configurations across different environments.
• Resolved DNS, VPN, TCP/IP, and LAN issues. Configured Windows, Linux, and dual-boot environments for lab and operational use.

HSC (Science) – Khar Education Society Junior College (2018)

SSC – Shree Mumbadevi Vidya Mandir (2016)