Kongali1720
Security Researcher & Cybersecurity Engineer
"Building secure systems through deep technical understanding, ethical research, and relentless pursuit of excellence."
200+
Vulnerabilities Found
Command Prompt - kongali1720
C:\Security> whoami
security_researcher
C:\Security> cat skills.txt
web_app_sec, infrastructure_hardening, red_team, blue_team, automation, reverse_engineering, blockchain, web3
C:\Security> echo $STATUS
hunting | building | learning
I'm Kongali1720, a security researcher and engineer with a deep passion for understanding how systems break and how to make them unbreakable. My journey in cybersecurity started with a curiosity about how things work under the hood, which evolved into a career dedicated to protecting digital assets.
I specialize in web application security, infrastructure hardening, and penetration testing. My approach is hands-on and practical - I believe in understanding systems at a fundamental level before attempting to secure them. I've spent years working with both offensive and defensive security, which gives me a unique perspective on the entire security lifecycle.
Technical Skills
Core competencies and areas of expertise in cybersecurity and system engineering.
Expert in identifying and mitigating web application vulnerabilities including OWASP Top 10, authentication bypass, and business logic flaws.
OWASP Top 10
Burp Suite
SQLi/XSS
API Security
Designing and implementing secure infrastructure with focus on hardening, network security, and cloud security best practices.
Linux Hardening
Firewall
SSH Security
Cloud Security
Comprehensive penetration testing services including network, web, mobile, and cloud environment assessments.
Red Team
Blue Team
Social Engineering
Physical Security
Developing custom security tools and automation scripts using Python, Bash, and other scripting languages.
Python
Bash
Automation
CI/CD Security
Advanced vulnerability research and exploitation techniques with focus on zero-day vulnerabilities and complex attack vectors.
Reverse Engineering
Fuzzing
Memory Analysis
Binary Analysis
Expert in securing blockchain systems, smart contracts, and decentralized applications with focus on cryptographic security.
Ethereum
Solidity
Smart Contracts
DeFi Security
Professional Experience
A timeline of my professional journey and key achievements in cybersecurity.
2023 - Present
Principal Security Researcher
Global Cyber Defense
Leading security research initiatives and developing advanced security tools for enterprise clients. Specializing in zero-day vulnerability research and custom exploit development.
2021 - 2023
Senior Penetration Tester
SecureWorks
Conducting comprehensive penetration tests for Fortune 500 companies, specializing in web application and infrastructure security assessments.
2015 - Present
Security Consultant & Blockchain Specialist
Independent Consultant
Providing security consulting services with specialization in blockchain systems, smart contract auditing, and decentralized application security.
2001 - 2004
IT Specialist
Private Banking Sector
Started my IT career in the private banking sector, developing foundational skills in system administration, network security, and financial systems.
Featured Projects
Open source projects and tools developed to enhance security capabilities.
A comprehensive framework for securing web applications with automated vulnerability scanning, penetration testing, and security hardening capabilities.
Python
Flask
SQLAlchemy
Docker
Advanced vulnerability scanner with machine learning capabilities for detecting complex vulnerabilities and zero-day exploits.
Python
Machine Learning
NLP
API
Advanced SSH security tool with multi-factor authentication, session recording, and real-time threat detection capabilities.
Go
SSH
MFA
Audit
Bug Bounty Highlights
Notable bug bounty achievements and contributions to the security community.
$10,000
HackerOne
Critical RCE
$5,000
Bugcrowd
Remote Code Execution
$2,500
YesWeHack
Privilege Escalation
$1,000
Intigriti
SQL Injection
$750
Synack
Cross-Site Scripting
$500
Private Program
Information Disclosure