Sundram Yadav

Open Source Software Engineer | Security Researcher

Himachal Pradesh, IN.

About

Sundram is a proactive Open Source Software Engineer and Security Researcher with a strong background in full-stack development, network reconnaissance, and vulnerability disclosure. Leveraging expertise in Python, Go, and JavaScript frameworks, they have built and maintained over 15 open-source projects, including widely adopted security tools, demonstrating a commitment to community contribution and technical innovation. With experience in code auditing and bug bounty programs, Sundram excels at identifying and mitigating security risks while driving impactful software development initiatives.

Work

Freelance / Contract

|

Code Audit & Open Source Packaging

Remote, Remote, N/A

→

Summary

Led comprehensive code audits and prepared large-scale applications for public open-source release, ensuring code quality, security, and proper licensing.

Highlights

Audited a 50K+ line NestJS + Vue 3 codebase (Zyphron Dash), identifying and remediating personal data and secrets from git history to prepare for public open-source release.

Refactored a Python Telegram bot (IGNOU Bot) by migrating to a class-based architecture, implementing type hints, and significantly improving error handling for enhanced robustness.

Configured GitHub releases, topics, LICENSE, and README documentation for multiple open-source projects, streamlining community engagement and project discoverability.

Various Platforms

|

Security Researcher (Bug Bounty)

Remote, Remote, N/A

→

Summary

Proactively identified and responsibly disclosed critical security vulnerabilities in web applications, enhancing digital security postures for various platforms.

Highlights

Discovered and reported numerous security vulnerabilities in web applications through systematic reconnaissance, penetration testing, and adherence to responsible disclosure guidelines.

Developed and deployed custom automation scripts alongside industry-standard tools like Burp Suite and Nmap to efficiently conduct comprehensive security assessments and vulnerability identification.

Contributed to strengthening application security by providing detailed vulnerability reports and actionable recommendations for remediation.

Self-Initiated

|

Open Source Developer

Remote, Remote, N/A

→

Summary

Initiated, built, and maintained a diverse portfolio of over 15 open-source projects, significantly contributing to the developer community through innovative tools and utilities.

Highlights

Developed and maintained 15+ open-source projects, accumulating over 510 commits and 40+ cumulative stars on GitHub, demonstrating consistent contribution and technical leadership.

Created the AdwanceSNI series of network reconnaissance tools, achieving 35+ combined stars and 12+ forks, widely adopted within the security community for subdomain discovery and host scanning.

Engineered and deployed various community-used tools, including Telegram bots, CLI utilities, web scrapers, and automation scripts, addressing practical needs and enhancing developer workflows.

Education

SPU University

Himachal Pradesh, Himachal Pradesh, India
→
Bachelor of Computer Applications Computer Applications

Government Senior Secondary Boy School

Himachal Pradesh, Himachal Pradesh, India
→
High School Diploma Arts Grade: 75.6%

Skills

Programming Languages

Python, PHP, Go, JavaScript, TypeScript, Kotlin, Bash.

Backend Development

Node.js, Express.js, NestJS, REST APIs, GraphQL.

Frontend Development

Vue.js, React.

Databases

MySQL, SQLite, TypeORM.

Infrastructure & DevOps

Linux, Docker, Nginx, Git, WebSocket, Cloudflare.

Security

Network Scanning, Burp Suite, Nmap, Bug Bounty.

Computer Science Fundamentals

DSA, OS, Computer Networks.

Miscellaneous

Multithreading, Web Scraping, CLI Dev, Automation.

Projects

Zyphron Free Dash

→

Summary

A comprehensive full-stack game server hosting platform featuring a credits-based economy and seamless integration with the Pterodactyl panel.

AdwanceSNI 2.0

→

Summary

A high-performance, multithreaded network reconnaissance suite designed for advanced subdomain discovery, host scanning, and IP extraction.

AdwanceSNI

→

Summary

An initial version of the SNI finding and network scanning tool, laying the groundwork for more advanced reconnaissance capabilities.

IGNOU Grade Card Bot

→

Summary

A Telegram bot designed to provide real-time assignment status and grade cards by scraping IGNOU portals for both CBCS and non-CBCS programs.

AirBeats

→

Summary

An Android music player to which significant features and fixes were contributed, enhancing its functionality and user experience.