Zishan Ahamed Thandar
Offensive Security Researcher and Ethical Hacker helping SaaS, startups, and enterprises discover and fix real-world vulnerabilities in their web applications, APIs, infrastructure, and Active Directory — before attackers do. Active bug bounty hunter on HackerOne and selected private programs.
Hall of Fame & Recognitions
Recognized over twenty times by international organizations for impactful, responsible disclosure that helped protect millions of users and critical systems.
…and additional organizations across technology, education, and government sectors that have trusted my work to improve their security posture.
Experience
Independent Bug Bounty Hunter
2018 — Present · HackerOne · Yogosha
Conducted independent security research across real-world production systems, responsibly disclosing high-impact vulnerabilities including access control flaws, authentication issues, stored XSS, and complex business logic vulnerabilities.
Recognized through public Hall of Fame acknowledgements and verified reports on industry-standard vulnerability disclosure platforms.
Projects
Pentester Guide
Complete penetration-testing knowledge base — 7 deep-dive modules, 27 cheatsheets, and hundreds of curated tools, methodologies, and resources. Hand-rolled Jekyll theme on GitHub Pages with clean SEO.
Hackify
Bash script that automates installation of common wordlists and penetration testing tools on Debian-based systems, so new lab or VPS environments are ready for testing with a single command.
WebsiteDorkerPro
OSINT and recon tool for red teamers, bug bounty hunters, and web app pentesters to quickly generate dorks, discover exposed endpoints, and map attack surfaces around a target domain.
Browser Add-ons & Themes (Firefox)
A small set of Firefox extensions and themes built around offensive security work and long sessions in dark environments — proxy routing, recon tooling, and high-contrast reading.
Lightweight add-on for one-click proxy switching between Burp Suite and TOR, reducing setup overhead and keeping one browser dedicated to offensive security work.
Recon-focused add-on packaging the tooling and workflow used during the reconnaissance phase of an engagement, so it is available without leaving the browser.
High-contrast, security-centric theme mirroring the glow of a terminal, built to reduce visual fatigue during long hours of security research and coding.
Certifications & Education
Cyber Security Certifications
Academic Qualification
Coding & Technology Certifications
Testimonials
“We greatly appreciate your effort in disclosing a security vulnerability responsibly and confirming the fix.”
“Thanks for your hard work, Zishan!”
“We appreciate you bringing this to our attention.”
“Thank you for bringing the following vulnerability to our attention.”