هادی رنجبر

Cybersecurity Specialist and Full-Stack Developer with 14+ years of software development and 4+ years of penetration testing experience. Proven record of discovering critical security vulnerabilities, ranked #1 in Say Technologies' Bug Bounty Program. Skilled in application security, vulnerability assessment, and secure coding practices. Experienced in both white-box and black-box testing, with deep expertise in Broken Access Control and authentication/authorization flaws.

Independent Security Researcher & Penetration Tester - Freelance / HackerOne

(2022-05)

• Ranked #1 in Say Technologies Public Bug Bounty Program.
• Discovered critical Improper Authorization vulnerability leading to full admin panel compromise.
• Identified multiple Broken Access Control, Improper Authentication, and Input Validation flaws.
• Reported critical data exposure vulnerability affecting Meli Bank of Iran.
• Delivered both white-box and black-box penetration tests for web and mobile applications.

Founder & Full-Stack Developer - Self-employed, CafeBazaar Marketplace

(2016 - 2021)

• Created Unfollowyab, Instagram analytics app with 2+ million installs in CafeBazaar.
• Built Megafollower and Likestan, driving engagement and follower growth for clients.
• Designed and deployed backends (Java) and responsive frontends for scalable apps.
• Managed full development lifecycle including coding, deployment, and monetization.

Founder & Lead Developer – nobat.co - Self-employed

(2021)

• Developed appointment booking SaaS platform using Go (backend) and Angular (frontend).
• Architected microservices-based, scalable, secure application infrastructure.
• Integrated role-based access control and security best practices.

M.Sc. - Software Engineering - Islamic Azad university of Estahban

B.Sc. - Physics - Payam-Noor university of Estahban (2016)