Skip to content

Latest commit

 

History

History
60 lines (39 loc) · 1.59 KB

File metadata and controls

60 lines (39 loc) · 1.59 KB

Security Write-ups & Tools 🛡️

This repository contains my security research, vulnerability write-ups, and proof-of-concepts (PoCs) created as part of my learning in cybersecurity and preparation for Google Summer of Code (GSoC) 2026.


🛠️ Tools

  • scan_headers.py – Checks HTTP security headers and warns if critical headers are missing.
  • url_params_finder.py – Extracts URL query parameters for IDOR, XSS, and logic-flaw testing.
  • zap_header_alerts.py – Automates detection of missing security headers using OWASP ZAP API alerts.

📂 Contents

  • PDF vulnerability write-ups
  • Security testing scripts & small tools
  • Notes from labs and practice (OWASP, PortSwigger, TryHackMe)

🔐 Open Source Contributions

  • OWASP Dependency-Check

  • OWASP ZAP

    • Documentation improvements in zap-api-docs
    • Working on API usage guidance and automation examples

🎯 Focus Areas

  • Web Penetration Testing
  • OWASP Top 10 (XSS, SQLi, CSRF, IDOR, SSRF)
  • Recon & vulnerability discovery
  • Automation with OWASP ZAP
  • Secure coding practices

⚖️ Ethics

All research here is performed on intentionally vulnerable labs, test environments, or systems where I have explicit permission. No illegal or unauthorized testing.


👤 About Me

Aspiring cybersecurity contributor focused on open-source security tooling and web application security research.

GitHub: https://github.com/SachinAditya