I'm a security engineer. I build tools, find bugs, and write about both.
- Focus
- Vulnerability research, security tooling
- Latest find
- CVE-2025-65875 — RCE in FPDF
- Currently
- Independent contractor — security testing, CTF infrastructure
I got into security by messing around with tools and technologies I barely understood until something clicked. That eventually turned into pentesting, red teaming, and engineering security infrastructure.
CVE-2025-65875 is the most recent thing I found: FPDF stores font definitions as PHP and includes them at runtime, so an attacker-controlled font path becomes code execution in FPDF library. Every version up to 1.86 is affected.
Background
Vellore Institute of Technology, Bhopal — Computer Science Engineering, specialising in Cyber Security and Digital Forensics. I led the OWASP student chapter there.
CyberWarFare Labs and DGTA, Indian Army came before that. These days I work as an independent contractor, doing security testing and building CTF infrastructure for companies and security events.
What I want to do next is more engineering and research: finding bugs at scale and working on their root causes. I write here.
Get in touch
I’m open to security engineering and research work, or to talking through a bug you’re looking at.
Email is the fastest way to reach me.