> About Me

>> I'm Sajjad Siam, an independent security researcher and bug bounty hunter operating under the handle nullshy. I hunt vulnerabilities on Bugcrowd, discover CVEs in WordPress plugins, build proof-of-concepts, and develop tooling for large-scale offensive reconnaissance. Currently pursuing B.Sc. ECE at RUET while actively researching in the wild.

Education

Bachelor of Science in Electrical and Computer Engineering

Rajshahi University of Engineering & Technology (RUET)

2022 – Present (3rd Year)

Pursuing B.Sc. ECE with a strong focus on software engineering and cybersecurity, actively conducting independent security research alongside academics.

Active independent security researcher
Bug bounty participant on Bugcrowd
WordPress CVE discovery & PoC development
Building offensive security tooling

Specializations

Bug Bounty Hunting

Active
Bugcrowd platform (handle: nullshy)
Web application vulnerability discovery
Responsible disclosure & reporting
OWASP Top 10 exploitation
Authentication & authorization flaws
Business logic vulnerability analysis

CVE Research

Researcher
WordPress plugin vulnerability research
Proof-of-concept (PoC) development
Full vulnerability lifecycle handling
Coordinated disclosure to vendors
CVE submission & documentation
Plugin ecosystem security analysis

Web Application Pentesting

Advanced
SQL Injection & XSS attacks
SSRF, XXE, IDOR exploitation
API security testing
Authentication bypass techniques
Privilege escalation
Session management flaws

Reconnaissance & OSINT

Advanced
Large-scale subdomain enumeration
Automated recon pipeline building
Asset discovery & fingerprinting
JavaScript file analysis
API endpoint discovery
Infrastructure mapping

Technical Arsenal

Offensive Security Tools

Burp Suite ProNucleiFfufSubfinderAmassHttpxSQLMapNmapMetasploitOWASP ZAP

Recon & OSINT

SubfinderAssetfinderHttpxWaybackurlsGauKatanaShodanCensysDNSxAnew

Vulnerability Research

WordPress Plugin AnalysisCVE WritingPoC DevelopmentCVSS ScoringPatch DiffingCode AuditingWPScan

Web Development

Next.jsReactTypeScriptPythonDjangoNode.jsTailwind CSSPostgreSQLREST APIs

Scripting & Automation

PythonBashGoJavaScriptRegexShell scriptingGo tool developmentAPI automation

Environment & Platforms

Kali LinuxDockerGitBugcrowdHackerOneVirtualBoxProxychainsTmuxVS Code

Core Expertise

Bug Bounty Hunting

Active bug bounty researcher on Bugcrowd (handle: nullshy). Focused on discovering high-impact vulnerabilities in web applications, APIs, and open-source software. Experienced with the full disclosure lifecycle — from discovery to triage to remediation.

BugcrowdOWASP Top 10API SecurityXSSIDORSSRFAuth Bypass

CVE & WordPress Plugin Research

Dedicated WordPress plugin vulnerability researcher with hands-on CVE discovery and proof-of-concept development. Understands the WordPress ecosystem deeply — plugin hooks, nonce bypass, SQL injection patterns, and unauthenticated remote code execution vectors.

CVE DiscoveryWordPressPHP AnalysisPoC DevWPScanPatch DiffingCoordinated Disclosure

Large-Scale Reconnaissance

Building and running automated recon pipelines for large-scale target enumeration. Expertise in subdomain takeover detection, live host discovery, endpoint crawling, and JavaScript analysis to surface hidden attack surface.

NucleiSubfinderFfufHttpxKatanaWaybackurlsAsset Discovery

Full Stack Development

Building functional web applications and security tooling using modern frameworks. Develops custom automation tools for bug bounty workflows, vulnerability scanners, and dashboard interfaces for research workflows.

Next.jsDjangoPythonTypeScriptPostgreSQLREST APIsDocker