Achuth V P

Security engineer working on application security and offensive research. I review code and design across Go, Java, Python, and JavaScript, drive threat modeling on high-risk flows, and build automation that scales that work.

Five CVEs, and Hall of Fame recognition from Google and Mozilla. Exploits published on PacketStorm.

Profile · LinkedIn

Open Source Contributions

Pull requests merged into repositories I don't own, ordered by the star count of the project. Click a contribution to open the pull request.

Repository	Stars	Contribution
coollabsio/coolify	65,458	#4288 Fix for the Self-XSS
GoogleCloudPlatform/python-docs-samples	8,153	#10341 FIx for arbitrary javascript injection
mozilla/bedrock	1,340	#17222 Apply py-svg-hush sanitized output to SVG uploads and reject oversized sanitized output
mozmeao/springfield	17	#1472 Reject SVG uploads when sanitized output exceeds max size

Writeups

• Bypassing a 3 layer SVG sanitizer: Stored XSS in Mozilla. The bypass, the parser differential, and the missing write().

Focus

Threat modeling (STRIDE) Secure code review SAST/DAST API security Supply chain security Exploit development Sanitizer bypass analysis AWS GCP CI/CD hardening