root@anand:~_
cybersecurity engineer by day, gymrat by evening, astrophile by night
write-ups
remote code execution via dependency confusion
march 2024
abusing graphql idor to delete another user's profile picture
july 2022
blind ssrf via dns rebinding
april 2022
miscellaneous
first price winners of c0c0n 2024 ctf competition [news link]
delivered a talk at defcon dc0471 meetup 0x02 in september 2018, focused on bug bounty hunting [event photos]
mail[at]anandsreekumar.com
© 2025 anand sreekumar