About Me

Portrait of Ashik Kunjumon

Offensive Security Consultant with 3+ years of experience in web, mobile and API penetration testing. Ranked 1st in VDP India with 50+ Hall of Fame acknowledgements from Apple, Oracle, Dell and more. Passionate about security automation and responsible disclosure.

  • 3+ Years Experience
  • 200+ Security Assessments
  • 50+ Hall of Fames

Skills & Expertise

What I test, and the tools I reach for

Penetration Testing

  • Web Application
  • API (REST, GraphQL, SOAP)
  • Android
  • iOS
  • External Network
  • Internal Network

Security Tools & Frameworks

  • Burp Suite
  • OWASP ZAP
  • Postman
  • Nessus
  • Qualys
  • Wireshark
  • Metasploit
  • Frida / Objection

Scripting & Languages

  • Bash Scripting

Certifications

Credentials earned along the way

  • eCPPTv2 eLearnSecurity Certified Professional Penetration Tester v2 eLearnSecurity
  • eJPT eLearnSecurity Junior Penetration Tester eLearnSecurity
  • CEH Practical Certified Ethical Hacker Practical EC-Council
  • CAP Certified AppSec Practitioner The SecOps Group
  • Cyber Security Analyst CyberWarFare Labs

Achievements & Hall of Fame

Organisations that have acknowledged my reports

Global Acknowledgements

HackerOne Rankings

  • Ranked 1st in VDP India, Q2 2025
  • Ranked 2nd in VDP India, all time

CVE Published

  • CVE-2023-34581
  • Critical SQL injection (CVSS 9.8) in Sourcecodester Service Provider Management System 1.0, allowing unauthenticated database access through an unsanitised id parameter.

Get In Touch

Whether it's a question about my work, a penetration testing engagement, or just hello, this reaches my inbox directly