01
Complete Recon Workflow for Bug Bounty Hunting
Comprehensive guide on asset discovery, automation, noise filtering, and real world reconnaissance methodology.
2025 Edition
Who I Am
About Me
50+
Bugs
3+
Years
2
Tools
NamePurushotham R
ProfileSecurity Researcher
Emailpurushothamr242@gmail.com
LocationIndia
DegreeB.E in ECE
CompanyBloomeor (Founder)
Security Researcher & Founder
VerifiedWith a background in Electronics & Communication Engineering, I bring a unique perspective to cybersecurity, bridging hardware logic with software vulnerabilities.
My expertise spans web application penetration testing, automated reconnaissance, and developing security tools. I am specialized in web application security, reconnaissance automation, and vulnerability research.
When I'm not hunting for bugs or writing code, you'll find me farming, staying grounded and connected to nature. I also pursue wildlife photography, capturing the beauty of the natural world.
Bug Bounty Hunter
50+
Identified critical vulnerabilities including XSS, SSRF, SQLi across web applications
Tool Builder
2
Created ReconKit & JS Explorer — open source tools used by security researchers
Technical Writer
3+
Published in-depth security research & methodology articles on Medium
What I Do
Skills & Expertise
Expert
Web Application Security
Expert in OWASP Top 10, SQL Injection, XSS, SSRF, and authentication bypass vulnerabilities.
Advanced
Reconnaissance & OSINT
Advanced asset discovery, subdomain enumeration, and automated recon workflows at scale.
Advanced
Automation & Scripting
Building custom security tools and automating repetitive security testing workflows.
Intermediate
Infrastructure & Cloud
Security assessment of cloud infrastructure and containerized applications.
My Projects
Security Tools
Recon Framework
ReconKit
Personal reconnaissance framework for bug bounty built to automate multi-tool subdomain enumeration, JS endpoint extraction, and smart template scanning.
PythonBashSubfinderNuclei
JS Analysis
JS Explorer
A powerful, client-side only JavaScript enumerator and beautifier custom-built for bug bounty hunters, penetration testers, and security researchers.
JavaScriptHTMLCSSClient-Side
My Writings
Publications
02
Reading JavaScript Like a Hacker
Finding hidden APIs, logic flaws, and attack surfaces through comprehensive JavaScript analysis techniques.
Security Research
03
Automating SQL Injection with SQLmap
Practical guide on responsible SQLi automation, payload analysis, and exploitation workflow best practices.
Practical Guide
Reach Out
Let's Work Together
purushotham@kali:~$
Get in Touch
Interested in security consulting, bug bounty collaboration, or just want to discuss cybersecurity? Let's connect.