Yogesh Bhandage

About Me

Cybersecurity Analyst with over 3 years of experience in Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile platforms (Android & iOS), and APIs. I'm certified in eWPTXv2, CAPen, CPENT, and LPT (Master). I've secured major platforms like Oracle, ChatGPT, and BMW, contributing to cybersecurity research with CVEs. Skilled in managing client interactions end-to-end and delivering effective security solutions tailored to mitigate critical vulnerabilities and emerging threats.

Achievements

• Bug Bounty Hunter:
  • Successfully identified and reported vulnerabilities, securing websites including but not limited to Oracle, ChatGPT, BMW, 3Commas, Nestforms, Forage, 84codes, IndiaMart, Piwik PRO, Numer AI, and various other applications.
• CVE Contributions:
  • CVE-2024-24539: Vulnerability in FusionPBX versions 5.0.1 through 5.1.0 allowed remote attackers to execute arbitrary code by sending a specially crafted payload to the PHPSESSID component.
  • CVE-2024-28104: Vulnerability in CasaOS version 0.4.6 exposed sensitive user information, including Username, ID, Role, Email, and Nickname, potentially compromising user privacy and security.

Recognitions & Rewards

• Bounty reward & recognition from nestforms.com (15 Bounty & Recognitions)
• Bounty reward from 3commas.io
• Bounty reward from BMW for Discovering Critical Vulnerability
• Bugcrowd, Intigriti & HackerOne reward from private invites and more.

Certifications

• eWPTXv2 - eLearnSecurity Web Penetration Testing eXtreme v2
• CAPen - Certified Application Penetration Tester
• CPENT - Certified Penetration Testing Engineer
• LPT (Master) - Licensed Penetration Tester Master

Contact Me

Email: yogeshbhandage92@gmail.com

LinkedIn: Yogesh Bhandage