Infosec enthusiast! | @googlevrp fan boy 😍 | CTF @thehackerscrew1 | Web Security
Republic of India
Joined January 2018
- Tweets2.2K
- Following957
- Followers2.7K
- Likes3.8K
Sreeram KL retweeted
I made a MSRC (Microsoft) version of @xdavidhu’s Awesome Google VRP writeups repo! github.com/bribes/awesome-ms… #BugBounty
Sreeram KL retweeted
Before LLMs, software engineering was about accuracy, precision and consistency. 🤔
Sreeram KL retweeted
Two new blogs dropping today. A culmination of my work on AI-Assisted vulnerablity discovery with the release of the Security Constitution: kattraxler.cloud/a-security-…
And for those looking for the juicy bug details, an exfiltration techinique in BigQuery DTS
kattraxler.cloud/no-permissi…
Sreeram KL retweeted
I won Best Chrome VRP Researcher at Bugswat Singapore! I also shared Best Meme with @inspector_amb. I’ll be talking (in abstract) about some of my exfiltration and guardrail bypassing techniques at NahamCon in California next month!
Sreeram KL retweeted
How I stumbled across a DOM XSS on google.com:
svennergr.github.io/writeups…
#BugBounty #kaeferjaeger @GoogleVRP
Sreeram KL retweeted
I got second overall at the Google Bugswat in Singapore!! 🎉☺️
It was a talented group of almost 50 hackers so I am really proud of the findings and thankful to have been invited!
Sreeram KL retweeted
💥 bugSWAT is officially KICKING OFF at Escal8! 💥
We are bringing together Google's security engineers and some of the world's most talented external security researchers under one roof. The mission? Deep-dive into our architectures, hunt for vulnerabilities, and make Google products safer for everyone. 🔐🤝
The target is set. Let’s hunt! 🛠️🎯
#bugSWAT #ESCAL8 #GoogleVRP #BugBounty #GoogleSingapore #CyberSecurity
Sreeram KL retweeted
"Tesla Model 3's Brain on a Desk" 🏎️
Slides from my talk today at @BSidesNYC:
docs.google.com/presentation…
Sreeram KL retweeted
nothing feels quite like a good collaboration. it's a flow state, dribbling down the field, passing chains back and forth, until someone finally dunks.
this is one of those hacks where me and @rootxharsh were jetlagged in sweden, taking turns sleeping a few hours while the other kept hacking, eventually securing two big companies.
We tried to hack our way into @Lovable's office to start a sales conversation.
We couldn’t break Lovable directly, so we went one layer down: @supabase.
Race condition → superuser → shell → root → the keys to other databases in the region.
$25K. Patched in a day.
The full write-up: hacktron.ai/blog/supapwn
Sreeram KL retweeted
I'll be presenting my Tesla security research this Saturday, Oct 17 at @BSidesNYC! 🗽
bsidesnyc.org/schedule/ #BSidesNYC
Sreeram KL retweeted
Google paid me $90,000 for this RCE simonkoeck.com/writeups/goog…
Sreeram KL retweeted
Sandboxing is now more important than ever.
Here's a guest to host sandbox escape for gVisor release-20260928
This was our planned submission for Wiz zeroday-cloud-2026. Releasing it today because it's now patched in release-20261005
enjoy :)
Sreeram KL retweeted
We just received a $250,000 Chrome Full Chain bonus! 🎉
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
