Full record

Honours

Penetration Tester of the YearCredential ↗

World Cyber Games 2019, India's representativeCredential ↗

Paytm First Games Clash Royale Champion (National)Credential ↗

Youngest Tech-SavvyCredential ↗

Online World RecordsCredential ↗

VIVO PUBGM Tournament ChampionOfficial award

Model United NationsOfficial award

Competitions

2025The Professionals ChampionshipIndividual silver, team bronze

2025BRICS Hi-Tech Championship, YekaterinburgSilver medal

2024BRICS Future Skills, KazanGold medal, first place. Drone AI and electrical engineering

2024Games of the Future, KazanSports programming finalist

2023The Professional Championship, St. PetersburgBronze medal. IT software solutions for business

2023International High Technologies ChampionshipSilver medal. Neural networks and big data

2022Google Play Security Research ProgramTop researcher

2019World Cyber GamesIndia representative, APAC top 7, world top 32

2019Clash Royale National ChampionshipNational champion

Talks

2024Microsoft BlueHat IndiaHacking WebViews for Fun and Profit

2024CheckMates / CPX BangkokWebViews to Hack Applications

·IEEE Nirma UniversityBrowser and cybersecurity technical session

·IEEE GCETCybersecurity research and responsible disclosure

·International technical forumsSecurity research, engineering and technology

GitHub

131,757contributions since 2017

82public repositories

1,657stars earned

2,587followers

Contributions by year

15.8k2017

15.6k2018

10.6k2019

10.7k2020

27.8k2021

10.7k2022

13.2k2023

25.4k2024

8422025

1,0822026

Public contributions as counted by GitHub, read on 14 November 2026. 2026 is the year so far.

Top repositories

CPForgeTypeScript

Competitive programming tooling. 849 stars, 116 forks.

Repo ↗

memory.cppRust

Local-first AI memory and context control for developers and coding agents. 729 stars, 114 forks.

Repo ↗

StaleZeroTypeScript

Mutation consequence engine for cache invalidation, state sync, receipts and devtools.

Repo ↗

TeamMaahadevPython

Team India project for the BRICS 2025 Hi-Tech Championship in Yekaterinburg.

Repo ↗

UAV2024 Drone AIJupyter Notebook

Team India drone AI work from 2024.

Repo ↗

Finals neural networkPython

Neural network prepared for the High Technology Championship finals.

Repo ↗

See all 82 repositories on GitHub ↗

Projects

CPForgeDeveloper tools

Competitive programming tooling in TypeScript. 849 stars.

Repo ↗

memory.cppAI infrastructure

Local-first AI memory and context management, written in Rust. 729 stars.

Repo ↗

StaleZeroSoftware architecture

Cache invalidation and state synchronisation engine in TypeScript.

Repo ↗

BrowserVulnerabilitiesSecurity research

Browser vulnerability research.

Repo ↗

TeamMaahadevInternational engineering

Engineering competition project.

Repo ↗

UAV2024 Drone AIAI and robotics

Drone AI and automation for Team India.

Repo ↗

Championship finalsAI engineering

High Technology Championship finals work.

Repo ↗

SudokuSolverAlgorithms

Algorithmic problem solving.

Repo ↗

syzkaller forkOpen-source security

Kernel fuzzing.

AFL++ forkFuzzing infrastructure

Coverage-guided fuzzing.

Repo ↗

Browser attribute fuzzerSecurity tooling

Generates browser-attribute inputs to find unexpected behaviour across browsers.

Browser UI scannerSecurity tooling

Mutates UI dimensions and canvas elements to surface browser interface bugs.

Power line digital twinDrone AI

Rebuilds transmission towers, insulators and wires in 3D from drone imagery and LiDAR. BRICS 2025 silver-medal work.

Medical image analysisApplied AI

Breast and colon cancer image classification research. A project result, not clinical validation.

Security Researcher | Exploit Developer | Competitive Programmer

Kirtikumar

I break things so you don't have to.

the hacker behind the reports

Who am I

I'm Kirti. I find zero-days in browsers, kernels and firmware, then build the exploit that proves them. Google, Apple, Mozilla and Microsoft have shipped fixes for what I reported.

Away from the debugger I'm a competitive programmer and a former pro eSports player, with medals from three international engineering championships. Right now I'm hardening browsers and Android devices.

Top 32

in the world, World Cyber Games 2019

a.k.a. FaLcOnAPAC Top 7

eight fields. tap one to see everything in it

The arsenal

PHASE 1

Recon

dig, Maltego, Nmap, recon-ng

PHASE 2

Scan and exploit

Burp Suite, Dirsearch, fuzzing with ffuf and wfuzz

PHASE 3

Dig in and report

Impacket tools, manual enumeration, Markdown and HTML reports

PHASE 4

Red team

Custom scripts, payload creation, phishing simulations

CVEs found, reported, fixed

public security flaws, across 11 vendors

CVE-2023-1231Chrome

A crafted page could fake the address bar on Android.

CVE-2022-46692WebKit

Web content could bypass the Same Origin Policy.

CVE-2022-46695Safari

A framed page could spoof the browser interface.

proof, if you need it

Honours

2018Penetration Tester of the Year
2019World Cyber Games: APAC top 7, world top 32. Clash Royale national champion
2022Top researcher, Google Play Security Research Program
2023Two Chrome CVEs. Silver and bronze at international championships
2024Gold at BRICS Future Skills. Spoke at Microsoft BlueHat India
2025Silver at BRICS Hi-Tech. New Firefox CVE
2026Two PowerShell CVEs fixed by Microsoft