Skip to content
View yash4078-ops's full-sized avatar
🎯
Focusing
🎯
Focusing
1 follower · 8 following

Achievements

Achievement: Quickdraw

Achievements

Achievement: Quickdraw

Block or report yash4078-ops

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
yash4078-ops/README.md

👋 Hi, I'm Sachin Mishra

🔐 Independent Security Researcher | Bug Bounty Hunter
🎯 Focus: Web, API & Automation Platform Security

🧠 About Me

I am an independent security researcher specializing in identifying real‑world, high‑impact security vulnerabilities with clear technical and business implications.

My research primarily focuses on logic flaws and abuse scenarios that are often missed by automated scanners.

🔍 Core Research Areas

  • Broken Access Control (OWASP A01)
  • Unauthenticated & improperly secured APIs
  • Business Logic vulnerabilities
  • Automation & workflow abuse (rate‑limit, trigger abuse, mass actions)
  • Sensitive workflow enumeration (KYC / Admin / Internal flows)
  • Responsible disclosure & security documentation

📂 Case Studies & Security Research

🔎 Bug Bounty Case Studies (Redacted & Responsible)
👉 https://github.com/yash4078-ops/bug-bounty-case-studies

✔ Documentation‑only
✔ No exploit code
✔ No sensitive data
✔ Clear impact explanation

🛡 Responsible Disclosure Policy

All findings shared in this profile are:

  • Tested strictly within program scope
  • Responsibly disclosed via official bug bounty platforms
  • Never exploited beyond proof‑of‑concept validation

🤝 Let’s Connect

🔗 LinkedIn
https://www.linkedin.com/in/sachin-mishra-ab22113a2/

⚠️ Disclaimer
This profile and repositories are maintained strictly for educational and professional demonstration purposes.
Any misuse of information is not supported or encouraged.

Pinned Loading

  1. bug-bounty-writeups bug-bounty-writeups Public

    A curated collection of responsibly disclosed bug bounty findings — vulnerability breakdowns, PoCs, and remediation notes for the security community.

    1

  2. bug-bounty-case-studies bug-bounty-case-studies Public

    Real-world security research case studies (redacted & responsible disclosure)

    1

  3. flipkart-cors-misconfiguration-case-study flipkart-cors-misconfiguration-case-study Public

    A real-world security research case study analyzing a CORS misconfiguration and its impact evaluation in a large-scale production environment.

    1