S Vimalatithyan.
Chennai
Summary
Strong foundation in ethical hacking with hands-on experience in bug bounty programs, successfully identifying critical vulnerabilities in platforms such as NASA and TruTrip. Specializes in web application security, reconnaissance automation, and real-world penetration testing. Consistently refines skills and adapts strategies to overcome challenges like duplicates and out-of-scope reports. Passion for cybersecurity drives impactful results and proactive adaptation to the evolving threat landscape.
Overview
1
1
year of professional experience
Work History
Freelancer
bugcrowd
Chennai
06.2024 - Current
Recently, I received bug bounties of $30 USD and $200 USD for reporting valid security vulnerabilities in the TruTrip domain. These findings were acknowledged and rewarded through their responsible disclosure program.
While actively engaged in bug bounty hunting, I’ve also encountered several challenges:
- Many of my findings were marked as duplicates, meaning someone had already reported the issue before me.
- Some vulnerabilities I discovered were labeled out-of-scope, even though they posed real security risks. For example, I found a vulnerability in Microsoft, but it was considered out-of-scope as per their program’s rules, despite the technical validity of the report.
These experiences have helped me better understand scope limitations, report timing, and how to prioritize high-impact findings. They’ve also strengthened my skills in target analysis, reconnaissance, and vulnerability reporting.
Education
Bachelor of Science - Electrical, Electronics And Communications Engineering
Saveetha School of Engineering
Chennai07-2028
Skills
- Computer skills
- Vulnerability assessment
- Critical thinking
- Team building
- Collaboration
- Leadership
- Remote office availability
- Friendly, positive attitude
- Security testing
- Test automation
- Manual testing
- Penetration testing
- Incident response
- Social engineering
- Ethical hacking
- Digital forensics
- Cybersecurity frameworks
- Phishing awareness
- Security operations center
- Vulnerability analysis
Languages
Tamil
First Language
English
Beginner
A1
Accomplishments
- 🏅 Letter of Recognition from NASAReceived official recognition for responsibly disclosing a valid security vulnerability in a NASA system.
- 💰 Bug Bounty RewardsEarned multiple bounties, including $30 and $200 from the TruTrip domain for identifying valid vulnerabilities.
- 🛡️ 100+ Valid Vulnerabilities DiscoveredSuccessfully reported and acknowledged in various private and public bug bounty programs.
- 🛠️ Custom Recon Tool DevelopmentDeveloped Bash-based recon tools to streamline the bug hunting process.
Timeline
Freelancer
bugcrowd
06.2024 - Current
Bachelor of Science - Electrical, Electronics And Communications Engineering
Saveetha School of Engineering