shubham@chhatbar:~$ whoamiShubham
Shubham
Chhatbar
I break web apps and report them before someone else does. Pentester, bug hunter, still curious about what's underneath.
scroll to forward ↓shubham@chhatbar:~$ burp --intercept1 request held
Your request is on hold.
change anything. then forward.nothing sent yet. the request is waiting for you.
or tamper: role=admin · ../../etc/passwd · DELETE · a payload in X-Noteor just keep scrolling ↓
shubham@chhatbar:~$ cat findings.logGET /findings → 200 OK
Things I found before someone else did.
- MonkeytypePwn Request: a pull_request_target workflow ran an untrusted fork’s binary with a contents:write token. Code execution, token exfiltration.CVE-2026-118762GHSA-47v3-j88w-92f8 ↗read the writeup →critical · 9.3
- mixpeek/amuxDefault-scoped invites inherited Global access, bypassing authorization for unrestricted host filesystem read/write via /api/fs/*.GHSA-7888-pcwc-x87h ↗high
- a fintech platformUnauthenticated mass user enumeration through an IDOR.coordinated disclosurep2
- a web3 grants platformOpen redirect.coordinated disclosure
- ███████An authorization bypass, a cross-user session-termination IDOR, permissive CORS leaking data. And counting.names withheld
shubham@chhatbar:~$ ls -l writeups/GET /writeups → 200 OK
total 89
- 34Bandit/shell, permissions, ssh
- 13Cybersec Basics/networking, SOC, AD
- 10Natas/web exploitation
- 09flAWS/S3, IAM, leaked keys
- 05Pentesting/methodology, HTTP desync
- 05CTF/TryHackMe and one-offs
- 02Leviathan/SUID, ltrace, reversing
- 01Linux PrivEsc/sudo, cron, kernel
- 01Miscellaneous/protocol internals
shubham@chhatbar:~$ ls ~/projects14 repos
Built to understand what I break.
- cryptauditcrypto API misuse in Rustwip
- Search Enginecrawler + BM25 in Rustwip
- Prisma OSbootloader to kernelwip
- Axum Vuln Labvulnerable Rust app, with fixesrust
- LLM Prompt Injectionattacks and defencesai sec
- Telnet Honeypotlogs real attacker credsrust
- Runtime Decrypted Execmmap, RW to RX flipsc
- HTTP Server in CTCP as raw bytesc
- Keylogger in Creads /dev/inputc
- Hexdump in Chexdump(1), byte by bytec
- Meta Data RemoverEXIF stripped in-browserjs
- Undo / Redo Visualisedtwo stacks, in Manimpython
- Chess in C++check, mate, en passantc++
- my_allocmalloc: free list, coalescing, slabsc
shubham@chhatbar:~$ curl -i shubhamchhatbar.in/contactConnection: close
that was the whole response. if you got this far:shubhamchhatbar1
@gmail.comthe bytes below spell my email. go on, decode them.
@gmail.comthe bytes below spell my email. go on, decode them.