CRITICAL
Bypassing OAuth 2.0 via State-Parameter Pollution
Exploring a novel technique to compromise account security through malicious state injection in popular SSO providers.
Read Full Report
arrow_forward
Status: Available for Engagement
PRIAL ISLAM
AKA 0xPRIAL
Elite Cyber Security Researcher & Offensive Specialist. Deciphering complex architectures to fortify the digital frontier. Specializing in Bug Bounty, VAPT, and Deep System Audits.
ENCRYPTION_KEY: 0x82...F2
ACTIVE_SESSION
BEYOND THE TERMINAL
With over 5 years of focused experience in offensive security, I bridge the gap between architectural theory and practical exploitability. My journey began in the underground CTF communities, evolving into a professional career protecting critical infrastructure.
I specialize in identifying high-impact vulnerabilities that automated scanners miss. My methodology combines exhaustive manual analysis with custom-built exploitation scripts to ensure every vector is accounted for.
23+
Valid Reports
07+
Hall of Fame
TECHNICAL STACK
Core Proficiencies & Specializations
language
Web Security
Advanced exploitation of OWASP Top 10, complex IDORs, and race conditions.
EXPLOITATION
95%
api
API Pen-Testing
Specialized auditing for REST, GraphQL, and SOAP architectures.
ANALYSIS
88%
hub
Network Audits
Internal and external perimeter assessment and lateral movement analysis.
INFRASTRUCTURE
82%
OSINT Specialist
Digital Forensics
Social Engineering
Bypass Techniques
Phishing Simulation
STRATEGIC SERVICES
Precision testing methodologies designed to uncover critical vulnerabilities before they are exploited by malicious actors.
Vulnerability Assessment
north_eastComprehensive scanning and validation of your digital assets to identify potential weaknesses in configurations or software versions.
- Automated Reconnaissance
- False Positive Verification
- Prioritized Remediation Roadmaps
Penetration Testing
north_eastDeep-dive manual exploitation to simulate real-world attacks. We don't just find holes; we demonstrate the impact.
- Web & Mobile App Pentesting
- API & Cloud Security Reviews
- Detailed Executive Reports
verified_user
CERTIFIED_OFFENSIVE
SECURITY WRITE-UPS
View All Research
CRITICAL
MEDIUM
Massive Information Disclosure via Misconfigured GraphQL
How introspection and poorly filtered schemas led to the leak of 50k+ user profiles on a major fintech platform.
Read Full Report
arrow_forward
HIGH
Internal Network Pivot from Public Jenkins Console
A case study on why development tools should never be exposed without multi-factor authentication and strict IP whitelisting.
Read Full Report
arrow_forward
READY TO SECURE?
Whether you need a full-scale audit or want to consult on an upcoming release, I am ready to deploy. Reach out for availability.
mail
Direct Mail
contact@0xprial.io
lock
PGP Key ID
0x8B...A92F