$ whoami → nullshy

SAJJAD SIAM

> _

Bug Bounty Hunting

CVE Discovery

Web App Pentesting

Recon & OSINT

Independent security researcher and bug bounty hunter on Bugcrowd, specializing in WordPress plugin vulnerability research, CVE discovery, and proof-of-concept development. Building offensive security tooling for large-scale web reconnaissance.

Bugcrowd·Researcher
WordPress·CVE Hunter
nullshy·Handle
Active
Bugcrowd Researcher
CVEs
WordPress Plugin Findings
Recon
Large-Scale Pipelines
24/7
Hunting Mode

> Explore My Research

Security writeups, CVE discoveries, and bug bounty findings — all documented for the community.

> What I Do

Bug Bounty Hunting

Active vulnerability hunter on Bugcrowd. Discovering and responsibly disclosing high-impact bugs in web applications, APIs, and open-source software.

View Writeups

CVE & WordPress Research

Focused research on WordPress plugin security — finding CVEs, writing full PoCs, and coordinating responsible disclosure with vendors.

Read Findings

Security Tooling & Dev

Building custom recon pipelines, vulnerability scanners, and automation tooling to accelerate offensive security workflows.

See Projects

> Latest Writeups

Deep dives into security vulnerabilities, CVE findings, and bug bounty disclosures

> Loading writeups...

> Security Arsenal

Tools and technologies used in active security research and bug bounty hunting

Burp Suite
Nuclei
Ffuf
Subfinder
Httpx
Amass
SQLMap
Nmap
WPScan
Katana
Waybackurls
Shodan
Kali Linux
Docker
Python
Bash
Go
Git
Next.js
Django
PostgreSQL
OWASP ZAP
Metasploit
DNSx

Found a Bug? Let's Talk.

Reach out for collaboration, responsible disclosure coordination, or security consultation. I respond fast.

Get In TouchRead Writeups