e11i0t4lders0n / bugbounty-resources

Hi there, thanks for visiting my profile 👋

Who-Am-I

A small town boy and a Security Engineer by passion. Here's a little about me :)

Tushar Verma is currently working as a Security Engineer at People Interactive(I)Pvt. Ltd. (Shaadi.com) and also one of the Synack Red Team Member. He is currently doing a bachelors degree in Computer Science & Engineering with minor in DevOps. His major interests revolve around Application Security, Cloud Security, DevOps & DevSecOps. He is having 2+ year of expertise in security implementations and various security assessments which includes VAPT, Application Security testing, Cloud Security, DevOps & DevSecOps.

Area of Expertise:-

-Application Security
-Penetration Testing & Red Teaming
-Cloud Operations & Security
-DevOps & DevSecOps
-Reconnaissance & Asset Mapping
-Social Engineering
-IT Security Audit

Achievements:-

-Speaker at Reconvillage@DEFCON 29(The Bug Hunter's Recon Methodology)
-Speaker at GrabCON 2021(Exploiting SSRF like a boss)
-Speaker at BSides Noida Conference 2021(How to Fail at Bug Bounty Hunting)
-Speaker at DAMNCON '21(Hacking Oauth Application)
-Speaker at Owasp Gurugram(Bypassing Two-Factor Authenication for fun & profit)
-Speaker at Owasp Erode(Methodologies and Approach to start Bug Bounty Hunting)
-Speaker at HackersForYou(Bypassing 2FA)
-Speaker at GirlScript Kurukshetra(Beginners Guide to get started in Bug bounty)
-Speaker at Girlscript Jalandhar(Getting started in Bug Bounty)
-Guest Speaker: Take Care of Yourself & Take Care of your Money at Lovely Professional University

Awards and Recognition

-Appreciation by Google For Finding Sensitive Information Sensitive Data Exposure
-Appreciation by Netflix For Finding Business Logic Vulnerability
-Appreciation by Unilever Vulnerability Disclosure Program For Finding Authentication Bypass
-Appreciation by Dell, UnderArmour, Convertkit, Cloudways, Mastercard for Finding Vulnerability