Pranav Krishna M Email & Phone Number

Tamil Nadu, India

Kerala, India

▪️ Conducted in-depth research on stack-based exploitation techniques, including format string exploitation, out-of-bounds access, WebAssembly challenges, and race conditions, while occasionally tackling RISC-V and MIPS architecture challenges.▪️ Analyzed various heap exploitation vulnerabilities, focusing on House of * attacks, building a custom dynamic memory allocator, and exploiting Use-After-Free (UAF) and null byte poisoning vulnerabilities.▪️ Recreated exploits for specific vulnerabilities in JavaScript engines, including CVE-2024-0517 and CVE-2018-17463, while developing proof-of-concept exploits for several other challenges to demonstrate the impact of these vulnerabilities.▪️ Engaged in collaborative CTF competitions, applying vulnerability research findings to solve challenges and contribute to the success of team bi0s, achieving the rank of #1 in India on ctftime.org.▪️ Compiled research notes and insights on JavaScript engines, documenting findings on vulnerabilities for future reference and team knowledge sharing.

Kerala, India

▪️ Mentored junior team members in the principles of software vulnerabilities, with a particular focus on stack-based and heap-based exploitation techniques.▪️ Led multiple sessions on stack and heap exploits, providing in-depth insights into vulnerability identification and effective mitigation strategies for my mentees.▪️ Organized and facilitated "Pwny Racing" events one-on-one competitions to solve binary exploitation challenges creating a fun and competitive environment that enhances skill development while encouraging continuous learning.▪️ Developed and maintained a curated repository of proof-of-concept exploits for the latest CVEs, designed to support and guide juniors in the team.▪️ Assisted students in navigating modern security challenges through real-world case studies and practical exercises, conducting weekly scrum meetings to discuss their progress and promote best practices in vulnerability analysis and exploitation.

Kerala, India

▪️ Developed a challenge for the IC3 World Finals that involves triggering a heap overflow through unsanitized HTML code, which must be exploited using a specially crafted web page.▪️ Revised and confirmed educational materials to ensure clarity and effectiveness, covering essential topics such as ret2win, format strings, buffer overflows, and assembly challenges, thereby supporting the development of a knowledgeable security workforce.▪️ Developed multiple entry-level challenges for cybersecurity events that encouraged hands-on engagement, fostering skill development among participants and enhancing their understanding of practical security concepts.

United States

▪️ Actively participated in CTF challenges across various domains, enhancing skills in problem-solving and collaboration.▪️ Contributed to the development of a fully functional CTF bot, facilitating collaboration among team members and integrating CTF challenges on Discord for improved communication and coordination.▪️ Gained extensive knowledge in binary exploitation, focusing on stack and heap exploitation techniques throughout the CTF competition experience.

India

▪️ Co-founded zh3r0 alongside national finalists from InCTFj, fostering a collaborative environment for aspiring security enthusiasts.▪️ Successfully guided the team to achieve a top 3 ranking in India, showcasing our collective skills and dedication in various CTF competitions.▪️ Helped conduct zh3r0 CTF, which was India's first CTF hosted internationally by high school students, promoting engagement and participation in the cybersecurity community.▪️ Actively managed and collaborated with high school students, encouraging teamwork and knowledge sharing while solving diverse challenges across multiple domains in CTFs.▪️ Contributed to creating a supportive community for high school students interested in cybersecurity and competitive problem-solving.

Bachelor Of Technology - Btech, Computer Science

12Th Grade, Computer Science