Ethical hacker · security researcher
I’m Aashif — a bug bounty hunter and cybersecurity researcher who builds practical tools, explores how systems fail, and shares what I learn.
About
I work across application security, automation, and software engineering. I like understanding systems from the inside, then turning that understanding into something useful.
This site is a focused record of the tools I ship, the competitions I enter, and the lessons that survive real-world testing.
Selected work
CTF Platform
A CTF platform for practicing security challenges, tracking progress, and competing on leaderboards.
Hacker AI
A local assistant for vulnerability research, security analysis, and ethical hacking education.
Red Inject
Crawls forms, enumerates inputs, and streamlines pattern-based XSS and SQL injection testing.
CTF Writeups
Writeups for various Capture The Flag (CTF) competitions and challenges.
Text-to-Speech
Generate natural-sounding speech from text using advanced AI models.
Proof of work
Experience
BlackBoxCTF
Performed authorized security testing of the platform covering reconnaissance, endpoint enumeration, authentication/authorization, and web application vulnerabilities. Found two vulnerabilities - 1 Medium, 1 Low severity.
ShadowFox
Identified multiple vulnerabilities including Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and Local File Inclusion (LFI) on vulnerable test web applications.
Contact
For questions, opportunities, or collaborations, reach out through any of the links below.