Aditya Kumar

About Aditya Kumar

I am a Penetration Tester at BDO India LLP with 3 years of experience, with hands-on experience in web, mobile(android), network, and API security testing. I hold a B.Tech from Ambalika Institute of Management and Technology, Lucknow. My work focuses on identifying real-world security risks and helping organizations fix them before they can be exploited. I have worked with leading clients such as SEBI, NSE, Groww, Zerodha, HDFC, and Reliance, where I identified multiple critical and high-severity vulnerabilities, contributing to an overall risk reduction of nearly 65% through clear reporting and effective remediation guidance. One of my key findings involved a critical Arbitrary File Download vulnerability, which allowed access to sensitive files like web.config. This led to the discovery of AWS access keys, secret keys, and S3 bucket details, enabling access to cloud resources containing PII data such as Aadhaar and PAN details, along with VPN configuration files and server backups. The issue was responsibly disclosed with complete mitigation steps to prevent data breach.I specialize in OWASP Top 10 vulnerabilities and have completed 100+ TryHackMe rooms (top 3%) and 144+ Portswigger labs, strengthening my practical exploitation and assessment skills. On a daily basis, I use tools like Burp Suite Professional, Acunetix, OWASP ZAP, Postman, Nikto for web and api testing, Genymotion, MobSF, JD-GUI, JADX-GUI for mobile security, and Nessus, Nmap for network assessments. I also hold certifications including Certified Red Team Analyst, Certified AppSec Practitioner, API Penetration Testing, Junior Pentester (TryHackMe), Ethical Hacking Essentials, Certified Python Programmer, and OWASP Top 10.

Experience

1. Ctf Player

   TryHackMe

   Aug 2021 — Present · IN

   Actively Solving Rooms on tryhackme

Education

• Dr. A.P.J. Abdul Kalam Technical University (AKTU), Lucknow

  Bachelor of Technology - BTech

  2019 — 2023

• Central Board of Secondary Education

  High School

  2015 — 2017

• Uttar Pradesh State Board of High School and Intermediate Education (UPMSP)

  Intermediate

  2017 — 2019