I am a security researcher and technologist based in Bangalore, India.

My blog is centered primarily around network and application security. My writing has featured in publications such as The Hindu, Deccan Herald, 2600 Magazine, and elsewhere. Some selected writing can be found here. Some of my work has been documented in publications such as the New York Times and Caravan Magazine.

• [9 October, 2026] 1-click MMI execution in Android
• [17 June, 2026] Out-of-bounds write vulnerability in Snes9x 1.63
• [15 July, 2020] Command injection vulnerability in V-SOL home networking devices
• [24 August, 2019] Attacking a weak 3D Secure implementation
• [3 May, 2018] Extracting personal phone numbers linked to Aadhaar
• [23 February, 2018] Disclosure of account balance and recent transactions on PayPal
• [29 June, 2017] Fuzzing for obfuscated phone numbers