Praveen Choudhary
( 01 )
KEY ACHIEVEMENTS
Critical advisory
CVE-2026-54107
Use-After-Free vulnerability in win32kfull.sys, bypassing ASLR and DEP protections. Awarded highest bounty tier by Microsoft MSRC Windows Insider Preview Bounty program.
VIEW DISCLOSURE REPORT→Organizations disclosed
Hall of Fame — acknowledged by
- /images/halloffame/google.jpg
- /images/halloffame/dsci.jpg
- /images/halloffame/australia.png
- /images/halloffame/porsche.jpg
- /images/halloffame/singapore.png
- /images/halloffame/nebraska.png
( 02 )
TECHNICAL EXPERTISE
Techniques & tools
across four disciplines
Currently a BCA Cyber Security & Forensics student at Parul University (2023–2026). Active in bug bounty programs, CTF competitions, and security conferences — BSides Ahmedabad, SeaSecides Goa, Nullcon Goa.
OFFENSIVE SECURITY
- Windows Kernel Vulnerability Research
- Web App Penetration Testing
- XSS · SQLi · RCE · IDOR
- OSINT & Attack Surface Mapping
- Reverse Engineering (Ghidra)
- Active Directory Attacks
DEFENSIVE SECURITY
- Vulnerability Assessment
- Digital Evidence Analysis
- Incident Response
- Security Auditing
TOOLS & PLATFORMS
- Burp Suite · Nmap · Metasploit
- Wireshark · Nikto · Hydra
- OWASP ZAP
- Ghidra (headless kernel analysis)
- Semgrep (custom driver triage)
CLOUD & INFRASTRUCTURE
- Azure Security (AZ-500)
- AWS (foundational)
- Cloud Architecture (ICCA)
- Network Security
( 03 )
EXPERIENCE & ACTIVITIES
Roles across research,
forensics & coordination
Bug bounty, law-enforcement forensics, and engagement — the throughline is real-world security work over shiny titles.
Bug Bounty Hunter (Freelance)
Independent Security Researcher
2023 — Present- Identified and responsibly disclosed Critical/High/Medium vulnerabilities across 30+ organizations
- Specialized in Windows kernel research (win32kfull.sys, tcpip.sys) and OWASP Top 10 web app testing
- Recognized by Google, Microsoft (MSRC), Meta, Flipkart, and government agencies
Cyber Security Intern
Amroha Police Cyber Cell
Jun 2025 — Jul 2025- Assisted cybercrime investigations through technical analysis and digital evidence examination
- Contributed to cybersecurity awareness workflows within the cyber cell
Student Coordinator
Parul University — Training & Placement Cell
Feb 2024 — Mar 2025- Coordinated communication between students and corporate recruiters during placement drives
- Managed training initiatives; awarded Best Lead Coordinator
( 04 )
CERTIFICATIONS
Credentials that back the craft — each one independently verifiable at the source. Click through to confirm them directly.
( 05 )
