Hey there, welcome! I’m 0xdhanesh. It’s a pleasure to meet you.
I’m always interested in discussing and collaborating on offensive and defensive security projects. Feel free to reach out using the contact options below.
- Igiris - An automation-focused offensive security project.
- 0xdhanesh Blog - Migrating older research and publishing new technical content.
- Igiris and Iron
- Professional Certifications: OSCP, CREST CPSA, CREST CRT, Practical ICS Pentesting, and ICS/SCADA Protocol Traffic Analysis.
- CVE-2022-2912: Reported a server-side request forgery vulnerability affecting a WordPress plugin.
- Oracle Security Recognition: Reported an open-redirect vulnerability acknowledged in Oracle’s January 2022 advisory.
- TP-Link Acknowledgement: Reported an issue on TP Link router employed network analsysis, Firmware Reversing and Hardware Pentests.
- Product Security Leadership: Built and led a four-member product security team delivering end-to-end assessments across more than 10 ICS products.
- Enterprise Impact: Identified a SharePoint ACL issue that exposed sensitive HR data belonging to more than 500 employees and helped drive remediation within three days.
👥 Community Contributions - Click to expand
- Trained more than 300 engineers in API security at Sony.
- Reached more than 150 security professionals through reverse-engineering and exploit-development workshops.
- Mentored an OWASP Active Directory Security workshop.
- Delivered talks on Attacking Active Directory and the Cybersecurity Consultant Journey.
- Presented at the Hardware Village at Seasides Goa 2026.
- Trained students using eTCHP course content.
- Curated internal training material for colleagues and interns covering web application penetration testing, network analysis, and reverse engineering.
