- 🎓 Masters in Digital Forensics and Information Security at National Forensic Sciences University
- Areas: Web Application Security, Red Teaming, API Hacking, System Administration
- I sometimes hunt bugs on bounty platforms, report them nicely, and write poetry about them (in Python)
- I love contributing to the open source community.
Tools/Skills:
| CVE ID | Product / Vendor | Vulnerability Type | Year | Severity | Link |
|---|---|---|---|---|---|
| CVE-2025-31117 | OpenEMR | Blind SSRF | 2025 | High | NVD |
| CVE-2025-XXXX | Strapi | XX | 2025 | Critical | Pending Disclosure |
| Program / Target | Platform | Vulnerability Type | Severity | Status |
|---|---|---|---|---|
| NASA | Bugcrowd | API Exposure (x3) | P3 (x3) | Resolved |
| NASA | Bugcrowd | SSRF (DNS-only) | P5 | Resolved |
| NASA | Bugcrowd | Reflected XSS (Self) | P5 | Resolved |
📝 Some reports marked P5 couldn’t be escalated further. All submitted with responsible disclosure intent.
- RedHat Certified System Administrator (RHCSA) – RedHat
- Fortinet Certified Network Security Expert Level 1 & 2 – Fortinet
- Certified AppSec Practitioner (CAP) – TheSecOpsGroup
- Jr. Penetration Tester – [TryHackMe]
- Practical API Hacking – [TCM]
- Practical Bug Bounty – [TCM]
- Practical Ethical Hacking – [TCM]
Always learning, always breaking
🔗 LinkedIn: @ghostvirus
🔗 Medium: @ghostvirus
📧 Email for engagements: [email protected]
once he was a human.