p
purab_parihar

Purab P

@purab_parihar

Offensive Security Consultant

Inde
Anglais, Hindi
Certaines informations sont présentées en anglais.
À propos de moi
I am an Offensive Security Engineer skilled in performing Real-World Penetration Tests and Red Team Assessments across Web Applications, APIs, and Cloud Environments. I specialize in identifying critical vulnerabilities such as: ✔ Access Control & Business Logic Flaws ✔ API Security Issues ✔ Android Penetration Testing ✔ Cloud Misconfigurations (AWS and Azure) What you can expect: ✔ Realistic attack simulation ✔ Clear and developer-friendly reports ✔ Practical remediation guidance If you're looking for someone who thinks like an attacker, I can help securing your systems effectively.... Plus d’infos

Compétences

p
purab_parihar
Purab P
hors ligne • 
Temps de réponse moyen de 1 heure

Voir mes services

Mods de jeux vidéo
I will create fivem server for you
De20 $US / projetPlus de détails

Expérience professionnelle

Accops

Associate Analyst II

Accops • Temps plein

Jul 2026 - Present • 2 mos

1. Web App Pentesting 2. Mobile App Pentesting 3. Thick Client Pentesting 4. Cloud Security

NetSentries_Technologies

Consultant

NetSentries Technologies • Temps plein

Sep 2024 - Jun 2026 • 1 yr 9 mos

1. Executed SAST/ DAST assessments for Android and iOS applications following OWASP (MSTG), identifying critical vulnerabilities across authentication, insecure data storage, improper session handling, and API communication layers. 2. Simulated 5+ real-world attack scenarios during red team exercises to assess application, identity, and infrastructure security posture across enterprise environments. 3. Performed application-layer cloud security assessments across Azure and AWS environments, identifying IAM misconfigurations, exposed storage buckets, insecure serverless function configurations, and privilege escalation paths impacting hosted applications. 4. Assessed desktop/ thick client applications for insecure local storage, DLL hijacking, hardcoded credentials, memory exposure, and insecure inter-process communication across multiple enterprise engagements.