RL_V0ID
Cybersecurity student focused on offensive web exploitation, bug bounty methodology, and defensive remediation — breaking systems to understand how to defend them.
About RL_V0ID
My technical background, operating principles, and hands-on offensive security research.
Offensive Security Student
I specialize in Web Application Penetration Testing and Bug Bounty Hunting. My focus is understanding the mechanics of modern web failures — from broken object-level authorization to subtle parameter injections.
Long-term, I am working toward becoming a high-impact Bug Bounty Hunter and Red Teamer, prioritizing disciplined scope adherence, minimal reproduction steps, and defensive remediation.
Strict Scope Discipline
Testing is conducted exclusively on authorized targets (HackerOne, Bugcrowd, PortSwigger Academy, THM, and isolated local Docker labs).
Actionable Remediation
Every vulnerability report and lab note documents root-cause defensive fixes, parameterization, and secure architectural patterns.
Self-Reported Practice Statistics
Quantified learning progress across authorized practice labs and offensive security sandboxes
My Learning Path
The core disciplines and methodologies I am actively developing and practicing.
Web Exploitation & OWASP
Deep diving into OWASP Top 10, common vulnerability classes (SQLi, XSS, SSRF), and secure testing methodology.
Bug Bounty Methodology
Mastering reconnaissance, asset discovery, content discovery, and effective vulnerability reporting.
API Security & Fuzzing
Testing REST and GraphQL APIs for IDORs, broken authentication, and mass assignment vulnerabilities.
Recon Automation Tools
Developing custom scripts in Python and Bash to automate the boring stuff and speed up discovery.
Networking for Pentesters
Understanding HTTP/S, DNS, TCP/IP, and analyzing traffic patterns to find anomalies.
Linux Mastery
Building command-line confidence with piping, grep/sed/awk, and working with larger data sets.
Declared Tools & Technologies
Structured proficiency tiers categorized by operational domain as audited from verified portfolio records.
Featured Projects & Tools
Six documented builds spanning safe network tooling, local apps, and practice suites.
HTTP Security Header Analyzer
A Python terminal tool that checks important HTTP security headers, follows redirects, blocks private/local targets for safety, grades results, and explains fixes in a clear colorized report.
Security Practice Toolkit
A Python CLI project organizing small utilities for recon notes, password checks, hash practice, and basic web security workflows. Built to practice clean menus, file handling, and reusable functions.
Local Password Strength Checker
A local application that checks password strength completely on the client side and explains weak patterns like short length, repeated characters, and missing character variety.
Latest Research Writeups
Observations on access control vulnerabilities and defensive automation.
Meridian Technologies — Password Reset Vulnerability
Administrative account takeover via predictable Base64-encoded password recovery tokens combined with user enumeration on the forgot-password endpoint.
Meridian Market — IDOR / BOLA
Insecure Direct Object Reference (IDOR / BOLA) assessment in the Meridian Market order portal, exploiting missing object-level authorization checks on customer order records.
The Anonymous Playlist — OSINT Challenge
Multi-stage OSINT investigation involving cross-platform digital footprinting, shortened URL redirect analysis, public Spotify asset extraction, and automated QR code matrix reconstruction.
Connect With RL_V0ID
Submit an inquiry, collaboration proposal, or security research note directly into the message queue.