I'm a security engineer. I build tools, find bugs, and write about both.

I got into security by messing around with tools and technologies I barely understood until something clicked. That eventually turned into pentesting, red teaming, and engineering security infrastructure.

Most recently I found CVE-2025-65875, a remote code execution bug in FPDF: Affects everything up to 1.86.

I also hold OSCP and OSWP from OffSec.

Graduated from Vellore Institute of Technology, Bhopal, with a degree in Computer Science Engineering, specializing in Cyber Security and Digital Forensics. I also led the OWASP student chapter there.

Before that, I did some security work at CyberWarFare Labs and the Indian Army. I also work as an independent contractor, doing security testing and building CTF infrastructure for companies and security events.

What I want to do next is more engineering and research: finding bugs at scale and working on their root causes. I write about what I find here.

I’m open to security engineering and research work. Email is the fastest way to reach me.

sanidhyasonii@proton.me