Penetration tester · Gwalior, India
OSCP, CREST CRT and CREST CPSA certified. Seven years of offensive security across web, mobile, API, network and thick client, and a parallel habit of turning the slow parts of the job into tools anyone can use.
Certifications
Black box and grey box assessments across web applications, Android and iOS, APIs, thick clients, and internal and external network infrastructure. Tested against OWASP Top 10, SANS Top 25, MITRE ATT&CK and PCI DSS, including network segmentation testing.
Active Directory exploitation, assumed breach simulation, social engineering, phishing and OSINT. Post-exploitation across internal and external infrastructure.
Secure code review, SAST and DAST, software composition analysis, cloud assessments and DevSecOps pipeline integration — secret scanning and static analysis wired into CI/CD.
Mentoring people through CEH, OSCP, CRTP and CREST, and running open sessions on ethical hacking, VAPT, bug bounty, web, mobile and API security and red teaming. Most of it comes down to raising awareness and giving people a shortcut past the parts I had to learn the hard way.
Vadodara
Penetration testing across web applications and internal and external infrastructure. Manual and automated exploitation with custom tooling, PCI DSS network segmentation testing, and reconnaissance and reporting automated in Python and Bash.
Bengaluru · Gurugram · 3 years 1 month
VAPT across web, mobile, API and thick client applications for the banking and energy sectors. OSINT for red team operations, DevSecOps pipeline integration, and end-to-end delivery from scoping through reporting, executive debriefs and retest closure. Ran knowledge-sharing sessions on thick client pentesting and AI in offensive security.
Noida
Manual and automated testing of web applications, APIs, networks and Android apps. Phishing scenarios for social engineering assessments, S3 bucket, IAM, API gateway and container registry exploitation, and false-positive triage on automated scans.
Amritsar
Guided newcomers into bug bounty and penetration testing, alongside manual testing for business logic flaws. Wrote assessment reports carrying technical impact, business risk, CVSS scoring, proof of concept and remediation for technical and non-technical readers alike.
Ranked under the top 800 researchers
Acknowledged by Google, Dell Technologies, HubSpot, Western Union, Pinterest, Mastercard, Netgear, Kenna Security, (ISC)², Inflectra and Unilever among others. Globally labelled Top P1 Warrior in Q1 2020.
Browser-based tools for web application security testing. Every one has a paste mode that makes no network request at all, so a link can go to a client and they can reproduce a finding on their own infrastructure. Every one ends in report-ready Markdown.
One URL, every check: DNS and DNSSEC, WHOIS and RDAP, mail authentication, hosting, archives, content and discovery.
Header check, CSP analysis, cookie audit, 86 information-disclosure checks and per-platform remediation in one pass.
Evaluates a policy against a bypass corpus of 123 JSONP endpoints and 41 AngularJS paths, then derives a policy from what the page really loads.
Certificate chain, key strength, expiry and protocol posture, parsed locally. Says plainly what a browser cannot determine instead of guessing.
A working proof of concept for reverse tabnabbing and cross-origin opener policy, built to put real evidence in a report.
Deliberately vulnerable targets sandboxed to an opaque origin, running a real SQL engine in the browser. No server, no account, works offline.
I am Prashant Sharma, a penetration tester based in Gwalior. I started in 2019 and have spent seven years on offensive security — more than 300 black box and grey box engagements across web, mobile, API, network and thick client, for clients in banking, financial services, energy, retail and enterprise technology.
I have led testing teams and owned delivery end to end: scoping, testing, reporting, executive debriefs and retest closure. On engagements I regularly find and exploit SQL injection, cross-site scripting, CSRF, remote code execution, privilege escalation, authentication bypass and business logic flaws, then sit with the development team while it gets fixed.
The other half of it is giving back. More than 4,000 people have come through sessions I have run, and I mentor candidates through CEH, OSCP, CRTP and CREST. Security only improves when more people can spot the problem, so raising awareness and lending a hand to whoever is coming up next matters as much to me as the testing does.
That is also why I build tools. Roughly three quarters of an engagement is not testing — it is evidence, impact, remediation and report. Most online security tools tell you what is wrong and stop there. Mine give impact, reproduction steps, remediation and report-ready output, because that is the part that actually costs time. Where a browser genuinely cannot do something — enumerating TLS cipher suites, scanning ports — the tool says so rather than pretending.
Got an engagement, a red team exercise, or a session for your team or community in mind? LinkedIn is the fastest way to reach me.
I run an open cybersecurity community for people learning this work. It is free to join and there is no pitch attached.