C.H.S.E,ORISSA

Saraswati Sishu Vidya Mandir, Unit-8 Bhubaneswar

Birla Institute of Technology and Science, Pilani

Senior Vulnerability Researcher at Zscaler

Bangalore Urban, Karnataka, India

Zscaler

Senior Vulnerability Researcher

Fuzzing, Vulnerability Research, Fuzzing, CTF, Windows internals, Reversing

Ghost Is Vulnerable

Blogger

- Starting Career On Vulnerability Research**
Responsible for discovering 0day, Vulnerability research and developing exploits on Desktop application and drivers developed in c, c++, <a href="http://c#.net">c#.net</a>

Firmware Vulnerability research on BIOS, UEFI, ACPI, SMM and  SMI handlers.

Improvement on existing Chipsec Framework and wrote some modules as per the requirements.

Reverse engineering, Fuzzing, Exploitation, Memory Corruption
Source Code Review
Static And Dynamic Analysis.

Dell Technologies

Junior Vulnerability Researcher

- Fuzzing(Bit-Flipping,Mutation,Instrumentation)
- Exploitation
- Patch Analysis ,Binary Diffing And Root Cause Analysis
- IPS signature development,MAPP Tuesday Analysis
- Worked with famous Karalon And Metasploit tools for coverage
- Vulnerability Research mostly on memory corruption Vulnerabilities
- Automation Tool Development And POC Development with python,c/c++
- Shellcode Obfuscation
- Reversing 0day,1day,nday etc...
- File Format Research(PE,pdf,doc,swf) for vulnerability Reproduction
- Training on User-land And Kernel-land Exploitation
- Symbolic Execution.AFL,Sulley and many more to go..
-  Developed Custom 10+ Auxiliary Modules And 10+ Mixin Modules for Metasploit
- Providing Detection Guidance to SkyATP for Malware Protection

Juniper Networks

Security Researcher

HIPS/NIPS
Exploit Development for POC
Covered Specific Attack And Bypass Techniques Like ROP,ASLR,DEP,EMET,Sandbox Escape Techniques and many more...
Writing Detection on host based vulnerabilities as per PE characteristics as well HTML based
Static And Dynamic Fuzzing
JS malware,RTF malware,PDF ,SWF malware analysis And detection coverage
Writing scripts to automate work related processes.
covered  Exploit kits like Angler,Rig,Blackhole etc
Monitoring 0-day vulnerabilities,Exploit-kits,interpretation of tweets, blog posts and news events.
Developing tools using IDA python,IDC scripts for easy of process of work
Binary Diffing,Patch Analysis
Worked with user-mode debugger like Ollydbg,Immunity debugger,IDA PRO and kernel mode debugger like softice,windbg
Analyzing malwares,ransomwere dropped by exploit-kit like Locky,Cryptowall,Cryptolocker etc.
Trained junior Researcher for upcoming threat,Reversing and exploits.
Compromising botnet panel to gather threat Intelligence
MAPP Tuesday Analysis with winding to find root cause of vulnerability
Worked with data visualization tools like Elasticsearch,Logstash,Kibana
Malware Analysis Tools:
Regshot,CaptureBat,CFF explorer,PE-view,Malcode Analysis Pack,LordPE,Wireshark,Tcpdump etc.
Debugger tools:IDA,Windbg,Immunity debugger,ollydbg
Programming language:
C,C++,Python,Assembly(x86/x64),Win32 programming,Visual c++ and <a href="http://c#.Net">c#.Net</a>

Quick Heal

Threat Response Engineer

Exploit Development,Rootkit Development,compromise assessments and counter-offensive operations
Shellcode Development with python
Bypassing Antivirus,Creating Fully undetectable Code
Ensuring exploit should work with all platforms of OS universally.
Some kind of offensive work
worked with both user and kernel land exploit development

Confidential (In stealth mode)

Senior Security Consultant

As a part of Information Security Governance(ISG),main responsibilities are auditing Application for vulnerabilities, Application Security Assessment,VA/PT,Forensic as well as Malware Analysis
- Strongly Involved in Application and Network Penetration Testing,Security Assessment,Web application security,Server Hardening,Patch Management,Source Code Review for vulnerabilities
- Mobile Application Penetration testing for both IOS and Android,Secure Source Code review for mobile application.
- Regular Expressions Development with html,css and javascript and PHP
- Conducting Pen-testing for both thick and thin client Application
- Strongly following OWASP,OSSTMM,WASC ,PCIDSS architecture For Application Security Assessment
- Infrastructure and Network VAPT work like VOIP,AUX,Bluetooth Pen testing
- Custom script development with python and ruby for nessus,burpsuite to develop new exploit for attacking vulnerabilities.
- Managing vulnerabilities and producing advisories from Public managed vulnerability database like Exploit-DB,OSVDB,CVE-MITRE,Packet Strom Security,SANS etc..
- Reversing Application with IDA PRO,OLLYDBG for overflow vulnerabilities and able to create custom exploit with python as a POC.
- Involved for creating modules for Metasploit framework
- Reviewing Source Code and worked with shell scripting for automation
- Involvement in Exploit development as a POC
- Analyzing and Reversing binaries for malicious activity
- Basic Stack exploitation,Heap exploitation,wrote POC for overflow vulnerabilities
- Hands on Practice with C,C++,X86 Assembly,Python,Ruby on Rail,Shell Scripting
- Malware Analysis,malicious pdf and document analysis,static/dynamic malware analysis,Reverse Engineering Malware for communication,
- Collecting Malware from Live system,DLL injection, Javascript Malware Analysis,Identifying Malware in Dead system

Mashreq Bank

Information Security Consultant

Strong Involved In Web Application Security,Web Application Assessment,Application Security,Application Penetration Testing.Website Security Testing,
Mobile Application Penetration Testing like Android,IOS etc
Implement Security Based On OWASP,OSSTMM,WASC Architecture
Network Penetration Testing,Vulnerability Assessment,
PCI-DSS(Payment Card Industry-Data Security Standard) Implementation
PA-DSS,ISO 27005/27001,PCI Risk Assessment
Technical Security Services,Application Source Code Review for web application,Android application
Responsible For Secure Programming for client
Involvement for Developing Security Tools And Consulting Secure Coding in Scripting Language like PHP,Python and Ruby

SISA Information Security

Associate Consultant(Information security)

Project Planning On IT Security
IDS,IPS Implementation,WAF Devlopement
Provides Training to Students And Corporates in the field of information security
Penetration Testing
Web Application Security,Secure Coding with OWASP standard
Executing Basic Attacks like SQLi,XSS,CSRF,RFI,LFI,HTTP Parameter Pollution,HTTP Request Smuggling,HTTP Response Spliting and so on..
Professional Speaker in IT Security,Spreading Awareness regarding IT Security
Vulnerability Research,Good in Revere engineering
Exploit Analysis
Malware Research and Analysis

Innobuzz Knowledge Solutions Private Limited

IT Security Engineer(Penetration Testing,Search Engine Optimization)

IT Security and Investigation,Ethical Hacking Training

Appin Security Group

Information Security Auditor

developed web application in struts,lotous,db-2 express,java for IBM in Linux Environment,I was representing my college as Student Ambassador

Bikash Dash