██████╗ ██╗ ██╗ ██████╗ ███████╗████████╗ ██╗███╗ ██╗
██╔════╝ ██║ ██║██╔═══██╗██╔════╝╚══██╔══╝ ██║████╗ ██║
██║ ███╗███████║██║ ██║███████╗ ██║ ██║██╔██╗ ██║
██║ ██║██╔══██║██║ ██║╚════██║ ██║ ██║██║╚██╗██║
╚██████╔╝██║ ██║╚██████╔╝███████║ ██║ ██║██║ ╚████║
╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═══╝
class BugHunter:
def __init__(self):
self.name = "Pavan Shanmukha Madhav Gunda"
self.alias = "The One They Didn't Patch In Time"
self.role = ["Bug Bounty Hunter", "Security Researcher", "Digital Locksmith"]
self.status = "Currently inside your network 👀 (just kidding... maybe)"
self.superpower = "Seeing what developers hoped no one would ever see"
self.motto = "CVE me in, or CVE me out — I find them either way."
def current_mission(self):
return "Making the internet safer, one responsible disclosure at a time 🔐"
def threat_to(self):
return ["Misconfigured servers", "Unpatched endpoints", "False sense of security"]
def NOT_a_threat_to(self):
return ["Your data", "Your users", "The good guys"]
me = BugHunter()
print(me.current_mission())
# Output: Making the internet safer, one responsible disclosure at a time 🔐“Every logo below is a company that trusted the internet. I showed them why they shouldn’t — then showed them how to fix it.”
| 🎯 TARGET | 🔓 STATUS | 💀 VERDICT |
|---|---|---|
| 🏢 Cognizant | SECURED ✅ |
Hall of Fame |
| 🎓 Amrita University | SECURED ✅ |
Acknowledged |
| 🏠 Havelock | SECURED ✅ |
Acknowledged |
| 💼 Talentd | SECURED ✅ |
Acknowledged |
| 🕹️ Retro | SECURED ✅ |
Acknowledged |
| 🎓 Geethanjali College of Engg & Tech | SECURED ✅ |
Acknowledged |
| 📊 Plotly | SECURED ✅ |
Hall of Fame |
| 👟 Nike (Duplicate) | REPORTED 🟡 |
Beaten by seconds |
| 💻 Dell (Duplicate) | REPORTED 🟡 |
Beaten by seconds |
💬 Nike and Dell: I found it. Someone else just found it 0.001 seconds before me. The bug was real. The timing was cruel. That’s bug bounty.
╔══════════════════════════════════════════════════════════════════╗
║ 🔧 OFFENSIVE TOOLKIT ║
╠══════════════════════════════════════════════════════════════════╣
║ Recon → Subfinder • Amass • theHarvester • Shodan ║
║ Scanning → Nmap • Nuclei • Nikto • Burp Suite Pro ║
║ Fuzzing → ffuf • dirsearch • wfuzz • GoBuster ║
║ Exploits → Custom Scripts • Manual Analysis • Big Brain™ ║
║ Reporting → Markdown • PoC Videos • Responsible Disclosure ║
╚══════════════════════════════════════════════════════════════════╝
┌─────────────────────────────────────────────────────────────────┐
│ │
│ XSS ████████████████████ 100% 💉 Injected. │
│ IDOR ███████████████████ 95% 👁️ Seen what you hid. │
│ SSRF ██████████████████ 90% 🔁 Rerouted your trust. │
│ SQLi ████████████████ 80% 🗄️ Read your DB. │
│ Auth Bypass █████████████ 85% 🔑 Who needs a password? │
│ Open Redirect ███████████ 75% ↪️ I'll take that redirect. │
│ Recon ████████████████████ ∞% 🕵️ I never stop. │
│ │
└─────────────────────────────────────────────────────────────────┘
I don't break things.
I find the cracks that were already there
— before someone with worse intentions does.
Every bug I report is a disaster that didn't happen.
Every responsible disclosure is a user who didn't get compromised.
Every Hall of Fame mention is proof:
the best offense is a good defender.
╔══════════════════════════════════════════════════════════════════╗
║ ⚠️ ALL SECURITY RESEARCH CONDUCTED ETHICALLY & LEGALLY ⚠️ ║
║ ║
║ → All findings reported through proper disclosure channels ║
║ → No unauthorized access. Ever. Full stop. ║
║ → This profile is a portfolio, not a threat. ║
║ → If you're a company: your bug bounty program is welcome ║
║ ║
║ "With great recon comes great responsibility." — Pavan, prob. ║
╚══════════════════════════════════════════════════════════════════╝
┌──────────────────────────────────────────────────────────────┐
│ │
│ "Locks exist to keep honest people honest. │
│ I just make sure yours actually works." │
│ │
│ — Pavan Shanmukha Madhav Gunda │
│ Bug Bounty Hunter | Security Researcher │
│ │
└──────────────────────────────────────────────────────────────┘