Syarif Muhammad Sajjad

root@sajjad:~$ cat contact.txt

    Email: syarif07@wearehackerone.com
    Instagram: @syarifsajjad
    Twitter: @syarifsajjad
        

About Me

root@sajjad:~$ I am an experienced Bug Bounty Hunter and Cyber Security Enthusiast with a proven track record of identifying and reporting high-critical vulnerabilities for global organizations. Since 2021, I have been active on platforms such as HackerOne and BugCrowd, collaborating with security teams to improve system defenses. Recognized for my expertise in Web Application Security, API Security Testing, and Reconnaissance, I consistently deliver impactful results through an innovative and detail-oriented approach.

Skills

• ➜ WebApps Vulnerability Pentesting
• ➜ API Security Testing
• ➜ Root Cause Analysis
• ➜ Reporting and Documentation
• ➜ Reconnaissance
• ➜ Software Testing Expertise
• ➜ Penetration Testing Tools (Burp Suite, Metasploit, Nmap, etc.)

Work Experience

Bug Bounty Hunter (2021 - Present)

• ➜ Consistently ranked TOP 50 in Ubiquiti Bug Bounty Program
• ➜ Recognized in Apple Security Hall of Fame (July 2024)
• ➜ Discovered critical authentication bypass in AT&T admin panels
• ➜ Reported PII exposure vulnerabilities to IBM
• ➜ Identified critical financial customer data exposure in Fidelity National Information Services systems
• ➜ Uncovered Universal Cross-Site Scripting (XSS) vulnerability in Opera
• ➜ Contributed to improving security for major platforms like TikTok, Spotify, Indrive, Dell, Sony, Elastic, MongoDB, and Uber

root@sajjad:~$ cat tools.txt

Ancore

This tool is Automated Endpoint Crawler for Online Resources which can help you browse related URLs from various online sources automatically.

See more: GitHub Repository