🎯 Web Application Pentester | Offensive Security Researcher

Hi, I’m Tevin — a passionate and focused offensive security professional helping businesses identify and fix vulnerabilities before attackers do.

I specialize in:

• Manual testing of web applications and APIs
• Logic bug hunting
• Recon and exploitation
• Clear vulnerability reports with actionable fixes

I focus on manual, targeted testing of authentication flows, access controls, business logic, and APIs — prioritizing real-world impact over automated scans.

I share detailed, real-world findings in my writeups, with clear reproduction steps, impact analysis, and remediation guidance where possible — tailored for both technical and non-technical stakeholders.

• Web Security: IDOR, auth flaws, SQLi, XSS, logic bugs, endpoint abuse, CORS, File Upload etc
• Tools: Burp Suite, gobuster, ffuf, katana, ParamSpider
• Languages: Bash, Python, JavaScript, HTML.
• Platforms: HackenProof, Bugcrowd, YesWeHack (private programs).

• Academician
• Hacking in the wild
• DROP your weapon
• Your request is my demand
• Developer
• Inject with caution
• Prepare your payload and up you go
• Information is not knowledge, or is it?

Profile - https://pentesterlab.com/profile/tkvy

• Inroduction badge
• Blue badge
• HTTP Badge

• 🌍 LinkedIn
• 📧 Email: tkkagotho1@gmail.com

• Bugcrowd
• HackenProof

Thanks for stopping by — I’m open to opportunities in penetration testing, red teaming, or web security engineering. Let’s secure something together.