Active bug bounty researcher on HackerOne and Bugcrowd. Hunting web application vulnerabilities, auth bypasses, and injection flaws across paid programs.