RAJ
HRIDOY
I study how software fails — where networks, browsers, and the applications built on top of them make assumptions that don't hold — and I build small tools that put that research to use.
Where the research goes
Three threads run through everything here — writing software, studying how systems get misused, and practicing offense in controlled, legal environments.
Independent vulnerability research
Security testing and responsible disclosure through public vulnerability disclosure programs, tracked on HackerOne.
Security Contributions to the U.S. Department of Defense
Independent vulnerability research and responsible disclosure through the DoD's public Vulnerability Disclosure Program on HackerOne — reported directly to the VDP team, validated, and resolved.
What I actually work with
Programming
JavaScript, Python, and Bash — building tools, automating workflows, and reading other people's code closely enough to understand its assumptions.
Systems & Protocols
HTTP, TCP/IP, and DNS fundamentals — how requests actually travel, and where that path can be observed, redirected, or abused.
Security Practice
Reconnaissance, enumeration, and controlled testing against deliberately vulnerable environments — the discipline before the exploit.
Selected work
Three projects, each built to go deeper into a specific area — privacy, browser behavior, and interactive systems.
VaultChat
A privacy-focused peer-to-peer messaging platform built around temporary, encrypted sessions — no permanent message storage, no server-side history.
View projectPhantom
A browser intelligence and privacy analysis platform exploring fingerprinting, browser APIs, and exactly how much a site can learn about a visitor without asking.
View projectSignal Graph
An experimental interactive visualization system exploring data flow and digital signals through animated node relationships — currently in development.
In development — no public build yetCurious about how the web works under the hood, and how that work can be undone. Most of my time goes into networking fundamentals, scripting, and studying attacker techniques.
Dhangara High School for the fundamentals — everything past that, in programming and security, I'm teaching myself one concept at a time.
Read, break, rebuild, repeat. I learn best by poking at something until it does something unexpected, then figuring out exactly why.
How I approach a system
Understand
Map the architecture — what talks to what, and where trust is assumed rather than enforced.
Test
Challenge those assumptions directly, in a controlled, legal environment.
Validate
Reproduce the behavior reliably before drawing any conclusions from it.
Document
Write it down clearly enough that someone else could follow the same reasoning.
Let's talk.
For code, security research, or just to say hello — I'm reachable across a few places.