Who is
PWN-001?
Cybersecurity practitioner with 5+ years of practice in ethical hacking, OSINT automation, and threat intelligence. Recognized by Google and Bugcrowd for responsible disclosures, including vulnerabilities that prevented exposure of 1.14 TB of sensitive data.
From hands-on testing to structured intelligence.
I am a cybersecurity practitioner working across ethical hacking, OSINT automation, and threat intelligence. My work is rooted in practical field experience: identifying weaknesses, validating them under real conditions, and turning findings into clear, actionable security outcomes.
Over the last few years, I have reported critical vulnerabilities, helped mitigate exposure incidents affecting Pakistani organizations, and built self-hosted intelligence tooling that combines monitoring, OSINT, CRM, and network operations into a single environment.
That discipline has earned recognition from Google Bug Hunters and Bugcrowd, and it is reflected in the work I continue to build around TBV Server, TBV Bot, and responsible disclosure workflows.
Security is intelligence in motion.
I do not view security as a checklist. I see it as a continuous process of observing public exposure, validating weak points, and understanding how systems reveal their weaknesses before those weaknesses are weaponized.
That is why my work blends ethical hacking, OSINT, and threat intelligence. It is not enough to know a bug exists; the value comes from understanding the context, the risk, and the likely impact. That is where reliable security work begins.
"Researching digital exposure before it becomes a security incident."
Data is abundant. Context is scarce.
The internet is saturated with unindexed technical fragments: certificate transparency entries, orphaned DNS records, archived repositories, and exposed management interfaces. None of this constitutes a secret, but neither does it constitute intelligence.
Intelligence is synthesized context. It is the distinction between a raw CSV of thousand IP addresses and a high-fidelity map of an adversary's prospective breach paths. The mission is to surface clarity through the noise.
Building tools that support real security work.
TBV Bot was built as an OSINT automation tool for breach detection and reconnaissance workflows. It eventually reached 450+ users and became a practical demonstration that structured intelligence tooling has clear value beyond closed enterprise environments.
TBV Server is the next evolution: a self-hosted LAN intelligence platform combining system monitoring, CRM, OSINT, CCTV, and network tooling into a unified control panel. The goal was simple — build a full operational environment that functions locally, scales with real workflows, and supports serious research.
TBV Server · LAN Intelligence Platform
SELF-HOSTED OPERATIONAL INFRASTRUCTURE
A full-stack self-hosted LAN intelligence platform combining real-time hardware telemetry, WebRTC/HLS CCTV streaming, wireless channel scanning, AWS S3/GCS audits, and multi-threaded HTTP request replication in a unified control panel.
Vulnerability Discovery
Systematic discovery of web application vulnerabilities, business logic flaws, and infrastructure weaknesses.
OSINT Methodologies
Developing structured multi-source intelligence gathering pipelines beyond open web indexing.
Surface Mapping
Quantifying externally visible corporate assets, legacy systems, and unmonitored infrastructure.
Intelligence Automation
Building resilient, lightweight pipelines to transform unstructured digital footprints into verified findings.