Curriculum Vitae
Comprehensive overview of offensive security engagements, vulnerability disclosures, technical proficiencies, and verified certifications.
Priyanshu Singh
Offensive Security Researcher
Lucknow, Uttar Pradesh · India
I investigate complex security flaws across web applications, APIs and low-level systems. My work spans reverse engineering, binary exploitation and vulnerability research, with a focus on uncovering weaknesses, demonstrating their technical impact and advancing responsible disclosure.
Technical Focus Areas & Specializations
Windows Internals
Advanced vulnerability research, reverse engineering, and threat modeling.
Binary Exploitation
Advanced vulnerability research, reverse engineering, and threat modeling.
Web Exploitation
Advanced vulnerability research, reverse engineering, and threat modeling.
Reverse Engineering
- Web & API Penetration Testing
- Network Security
- Linux Kernel Exploitation
- Active Directory Attack Paths
Professional Experience
Penetration Testing & Vulnerability Researcher
Offensive Security Consulting · Contract / Independent
- Performs full-scope web application, API, and network penetration tests for enterprise clients.
- Develops reliable, weaponized proof-of-concept exploits to demonstrate business impact safely.
- Delivers remediation-focused executive briefings and engineering-level technical reports.
Offensive Security Researcher
Bug Bounty & CTF Research · Self-directed
- Conducts coordinated vulnerability disclosures across HackerOne and direct vendor security portals.
- Reverse engineers binary targets and develops exploit primitives in controlled CTF lab environments.
- Researches memory safety, Linux kernel attack surfaces, and LLM prompt injection vectors.
Vulnerability Research & Disclosures
View all 14 CVEs →5 Vulnerabilities Patched Across Enterprise Web Applications
Five reported vulnerabilities validated and patched by vendors following responsible disclosure guidelines.
28 Security Findings Across Institutional Portals
Coordinated security assessment of multiple college portals and institutional infrastructure; all issues reported to respective administrators.
Palo Alto PAN-OS GlobalProtect Command Injection
Command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software allowing unauthenticated attackers to execute arbitrary code with root privileges.
Ivanti Connect Secure Web Component Command Injection
Command injection vulnerability in web components of Ivanti Connect Secure allowing authenticated administrators or chained unauthenticated actors to send crafted requests and execute arbitrary commands.
PHP-CGI Argument Injection Remote Code Execution
Best-Fit character encoding conversion flaw in Windows PHP-CGI implementation enabling unauthenticated remote code execution via crafted query string arguments.
OpenSSH Signal Handler Race Condition (regreSSHion)
Signal handler race condition vulnerability in OpenSSH's server (sshd) allowing unauthenticated remote code execution as root on glibc-based Linux systems.
Verified Certifications
View credential details →Deloitte Cybersecurity Virtual Experience Program
Deloitte
Practical cybersecurity virtual experience covering security analysis, threat landscape assessment, forensics, and incident response fundamentals.
Education
(B.Tech) Bachelor of Technology / Cybersecurity
Pursuing undergraduate studies in engineering, with an interest in computer systems, software development and cybersecurity.