A security-focused developer specializing in full-stack engineering and offensive security research. Currently pursuing a BCA at the University of Calicut (2024–2028) and active as an independent security researcher on YesWeHack. Expert in the MERN stack with a focus on building secure architectures and testing them against modern exploitation techniques.
Security & Research
- OWASP Top 10 Testing
- API Security & Access Control Exploitation
- Authentication & JWT Vulnerabilities
- Reconnaissance & Asset Discovery
- Tools: Burp Suite, Nmap, FFUF, Kali Linux Software Engineering
- Languages: JavaScript (ES6+), Python, C++, PHP
- Backend: Node.js, Express.js, RESTful APIs
- Frontend: React, Tailwind CSS, HTML5/CSS3
- DevOps: Docker, Git, GitHub Actions, Google Cloud Platform
Secure MERN Authentication System Implementation of a robust authentication framework featuring RBAC, JWT-based sessions, and secure password management. OWASP Juice Shop Assessment A comprehensive security audit documenting vulnerability identification, exploitation, and structured mitigation recommendations. Reconnaissance Automation Python-based automation suite for subdomain enumeration and service discovery.
YesWeHack (2025 – Present)
- Participating in responsible disclosure programs for various organizations.
- Focusing on identifying sensitive data exposure and access control flaws in web applications.
- Contributing structured vulnerability reports with clear proof-of-concepts and remediation steps.
© 2025 Jojin John