Ayush Prajapati

Offensive Security Researcher | Bug Bounty Hunter | CTF Player

I specialize in identifying real-world vulnerabilities in production systems, academic institutions, and public platforms.
Below are selected write-ups demonstrating practical exploitation and responsible disclosure.

---

Bug Bounty & Responsible Disclosure

$600 – Self Hosted Program

How I Got $600 Bounty from a Self-Hosted Program
124 claps · 3 min read
Read Article

$100 – AI Bot Code Injection (HackerOne)

My First HackerOne Bounty – Code Injection on AI Bot
91 claps · 3 min read
Read Article

Notion Disclosure

How I Earned Bounty from Notion
246 claps · 5 min read
Read Article

Chess.com Disclosure

Bounty from Chess.com Membership Logic
151 claps · 2 min read
Read Article - 1 Read Article - 2

$125 in 10 Minutes

Rapid Vulnerability Discovery & Exploitation
128 claps · 2 min read
Read Article

---

University & Government Findings

IIT Delhi – Advanced Exploitation

How I Hacked IIT Delhi (Even SQLMap Failed)
165 claps · 6 min read
Read Article

IIT Kanpur – IDOR & Payment Bypass

214 claps · 2 min read
Read Article

IIT KGP Exploitation

211 claps · 3 min read
Read Article

IIT Madras – XSS via PDF.js + DoS

134 claps · 3 min read
Read Article

NIT Website – XSS Discovery

175 claps · 3 min read
Read Article

State Government – SQL Injection

166 claps · 3 min read
Read Article

---

Web Exploitation Techniques Demonstrated

• SQL Injection
• XSS (Stored & Reflected)
• IDOR
• CSV Injection
• Code Injection
• Input Validation Bypass
• Business Logic Exploits
• Denial of Service

---

CTF & Competitive Security

• Payatu Hiring CTF 2025
• TCS HackQuest 2025 (Round 2)
• TCS HackQuest 2025

---

Full Medium Profile:
https://medium.com/@stvroot Profile Link