Hello! I’m jayvardhan Singh. Leading the team and working as a Manager in PwC India having 9.5 years of experience in cyber security domain including application security, cloud security, vulnerability management, infrastructure assessment and penetration testing etc. for leading organizations in different industries such as IT product/services, e-commerce, automotive, banking/non-banking finance, manufacturing, education, oil and gas, retail, etc. Worked as freelancer and taking part of private and public bug bounty program to perform application security assessment, identified major security issues and listed 40+ Hall of Fame page like Paypal, Magento, Mailchimp, AT&T etc.

Download CV Contact Me

Professional Skills

Web App
Mobile App
Network
Red Teaming

My Experience

First Era
2011 - 2012

Freelancing Bug Bounty

Taking the part of bug bounty program in Bugcrowd and Hacker One. Listed on the 40+ Hall of Fame page of large organizations such as Paypal, AT&T, Heroku, Microsoft etc.
2012 - 2014

Master's

Post graduation in Cyber Law & Information Security from IIIT Allahabad.

My Interest

To begin with, I have a strong passion for dedicating my time to acquiring new techniques that can elevate my skills in the field of information security. Additionally, I enjoy indulging in various leisure activities such as watching cricket, movies, and engaging in games like chess. I invest a significant portion of my time in traveling and photography as well, as these pursuits help me stay invigorated and rejuvenated within my work environment.

Hacking
Gaming
Photo
Cricket
Traveling
Movies

From the Blog

How I Passed AWS Blacksky: Hailstrom

Jay 0

What is Blacksky: Hailstrom BlackSky: Hailstorm is specifically designed for AWS professionals and learners by the Hack The Box, who want to...

Account Takeover Using Password Reset Token

Jay 0

Account Takeover Using Password Reset Token I was testing an application and noticed that the forgot password functionality is vulnerable. ...

Gandalf AI Prompt Injection Game

Jay 0

What is Gandalf AI? Gandalf AI is an LLM prompt-injection hacking game developed by Lakera. The main objective is to extract the hidden pass...

Intercept Flutter Network Traffic For Android Application

Jay 0

What is Flutter? Flutter is an open-source user interface framework for building cross-platform applications. You can create apps for Androi...

Mainframe Account Takeover Vulnerability

Jay 0

What is Mainframe? A mainframe is a powerful computer built to process vast amounts of data and perform complex computations, serving as the...

# Account takeover vulnerability # exploit password change vulnerability

Account Takeover

Jay 0

What is Account Takeover vulnerability? Account Takeover vulnerability occurs when an attacker successfully gain the access of victim’...

# AWS # AWS lambda

Hacking AWS Lambda Function

Jay 0

What is AWS Lambda? AWS Lambda is a serverless compute service that allows to run the code without provisioning or managing servers. Le...

# AWS s3 bucket # Exploit s3 bucket

S3 Bucket Sub-Domain Takeover

Jay 0

How I Takeover S3 Bucket Sub-Domain What is Sub-domain takeover? Subdomain takeover is a security vulnerability that occurs when the domain...

Error Based SQL Injection

Jay 0

Here is my new write up Error Based SQL Injection..... Generally, we perform error based SQL Injection on ASP or ASPX websites. It is simil...

Union Based SQL Injection

Jay 0

SQL injection attack consists of "injection" of a SQL query via input data from the client to the application. Through SQL...

Persistent Cross Site Script

Jay 0

Hi Guys, this is my first blog if I do something wrong forgive me, I am going to show one of my interesting finding which I found when I w...

Certification

"The Certified Red Team Professional (CRTP) is an entry-level course and examination offered by Altered Security. This program serves as your gateway into the realm of Active Directory Security. Instead of primarily concentrating on exploiting patchable vulnerabilities, CRTP emphasizes the exploiting misconfigurations. These misconfigurations are often found even within organizations boasting high levels of security maturity. CRTP equips you with the skills to identify and enumerate valuable information while executing a range of attack techniques. These techniques include local and domain privilege escalation, establishing persistence, exploiting trust relationships, and evading antivirus detection—all with a minimized risk of detection."

Certified Red Team Professional (CRTP)Altered Security

"The AWS Certified Cloud Practitioner certification confirms a solid grasp of foundational concepts, high-level knowledge of the AWS Cloud, its services, and related terminology. It serves as an excellent entry point into the world of AWS certification, particularly suitable for individuals with no prior experience in IT or cloud computing who are transitioning into a career in the cloud, or for business professionals seeking to establish a foundational understanding of cloud technologies."

AWS Certified Cloud PractitionerAWS

"HackTheBox BlackSky: Hailstrom offers an interactive lab that enhances your understanding of AWS security by taking an offensive approach. Tailored for AWS professionals and students eager to acquire practical knowledge into assessing AWS environments, this hands-on experience provide mastering 12 crucial AWS resources and conquering 15 flags. During the lab, I explored the exploitation of serverless applications, EC2, identified vulnerabilities in web and APIs, and refined my skills in addressing misconfigurations, essential knowledge for real-world cloud security challenges. The scenarios also include various privilege escalation exercises within the AWS environment, some of which effectively replace local privilege escalation on lab machines."

BlackSky:HalistromAWS HackTheBox

Get in Touch

Feel Free To Contact

singh.jayvardhan06@gmail.com