#About Me
Education: - Self-taught in: * Penetration Testing * Bug Bounty Hunting * Web Development
As a Computer Science student specializing in cybersecurity, I've developed a passion for exploring the intersection of web development and security. My journey began with learning fundamental programming concepts and quickly evolved into a dedicated pursuit of ethical hacking and secure application development.
#Projects
Select a project file from the directory tree to view the contents.
SupplySync
A secure tracking system for supply chain management
SecureBank
Banking security analysis tool for penetration testing
VulnScanner
Automated web application vulnerability scanner
#Bug Bounty Reports
Discovered Cross-Site Request Forgery vulnerability in the user settings that could allow attackers to change victim account settings without their knowledge.
Discovered DOM-based Cross-Site Scripting vulnerability in the main dashboard that allowed attackers to execute arbitrary JavaScript code in victim browsers.
Found an open redirect vulnerability in the login flow that could be used to redirect users to malicious sites after authentication.
Identified exposed API keys with admin privileges in client-side JavaScript that could be extracted and used to access sensitive user data.
Found SQL injection vulnerability in the patient search function that could allow unauthorized access to sensitive patient records and medical data.
Total Bounties
$100
Vulnerabilities Found
8+
Total Bug Reports
5+
#Certifications & Achievements
Access Control Concepts
Covers the fundamentals of access control methods and strategies.
Incident Response
Understanding the process and methods for effective incident response.
Network Security
Principles and practices for securing network infrastructure.
Security Operations
Explores operational security processes and frameworks.
Security Principles
Foundational concepts in information security and risk management.
CSS
Basic understanding and application of Cascading Style Sheets.
Frontend Developer (React)
Proficiency in React for frontend web development.
JavaScript (Basic)
Fundamental JavaScript programming knowledge.
JavaScript (Intermediate)
Intermediate level skills in JavaScript programming.
Pre-Assessment
Initial assessment of cybersecurity knowledge and readiness.
Problem Solving (Basic)
Covers basic algorithmic and logical problem-solving skills.
Problem Solving (Intermediate)
Intermediate challenges in algorithmic thinking and coding.
Python (Basic)
Basic Python programming certification.
ICIP
Introduction to Critical Infrastructure Protection.
SQL Injection
Understanding SQL injection vulnerabilities and mitigation.
Type certifications --view in the terminal to browse certificates.
#Contact Me
You can reach me through the following channels:
Run command:
Access granted. Welcome to Sifat's secure channel.