$ whoami
Security Researcher · Bug Bounty Hunter
I find and responsibly disclose critical web vulnerabilities — work that has earned 470+ HackerOne reputation, monetary rewards, and recognition from some of the world's largest organisations.
I'm a security researcher based in Dhaka, Bangladesh, focused on offensive security — web application penetration testing, vulnerability discovery, and responsible disclosure. Since 2023 I've reported validated critical and high-severity findings across major bug bounty programs.
I'm currently completing a B.Sc. in Software Engineering at Daffodil International University, where my thesis proposes a context-aware cybersecurity maturity framework for higher-education institutions.
Public acknowledgements for responsibly disclosed vulnerabilities and security work. Click any card to view the letter or certificate.
HackerOne · Remote
Kahf Yazılım A.Ş · BPDB
Cybersecurity Awareness Day — DIU
Interactive demonstration of my thesis: a context-aware cybersecurity risk-rating model and institutional maturity self-assessment for higher-education, going beyond CVSS to weigh exploitability, asset criticality, and exposure.
Open the live demo →
A smart product-comparison platform to find the best deals across online stores — compare prices and features in one place.
View on GitHub →
A Flask app powered by deep learning to detect brain tumours from MRI scans — upload an image for instant AI-driven analysis.
View on GitHub →
A clean, responsive showcase of security research, bug bounty achievements, and professional certifications.
View on GitHub →Open to security research roles, freelance pentesting, and collaboration. The fastest way to reach me: