IT professional turned offensive security researcher and bug bounty hunter. I find real-world vulnerabilities in web applications and APIs, compete in CTFs, and I’m building toward a career in penetration testing, helping organizations stay one step ahead of attackers.
I’ve had the chance to test my skills against some of the world’s most respected companies, including Google, Apple, Microsoft, Meta, BBC News, Harvard University, University of Cambridge, Intel, Huawei, McAfee, ESET, Lenovo, and many more. Each acknowledgment below represents a vulnerability I found and responsibly disclosed.
Vulnerabilities responsibly disclosed across Googleplex, Waze, and Google internal assets, each one confirmed and triaged by the Google Vulnerability Reward Program panel. Credited on the Google Bug Hunters Leaderboard, listed in Google’s Hall of Fame, and financially rewarded by the Google Security Team.
Among the receipts: a personal reply from Martin, Google Security Team, one of the rarest direct acknowledgements in the bug-bounty world.
From a countryside village in Nepal to standing inside Caesars Palace, Las Vegas, DEF CON badge in hand.
From a countryside village in Nepal to standing inside Caesars Palace, Las Vegas, with a DEF CON badge in hand. Won the Pacific Hackers Pre-DEF CON Capture the Flag at HackerDojo, Silicon Valley, the qualifier drawing elite hackers preparing for DEF CON in Las Vegas. Took 1st place, publicly congratulated by the Pacific Hackers Association.
Subsequently invited to and attended DEF CON twice in Las Vegas, plus Black Hat USA in Las Vegas.
Covered by Nepal’s biggest newspapers and tech publications: The Annapurna Express, Tech Pana, Capital Nepal, Gorkhapatra (est. 1901), Shilapatra, Living with ICT, and more.
IT professional and offensive security researcher, with hands-on enterprise support experience paired with independent vulnerability research.
A security researcher who supported the cybersecurity of Nepal’s federal government, working within Singha Durbar, Kathmandu on some of the country’s most sensitive infrastructure.