Security Write-ups & Tools 🛡️

This repository contains my security research, vulnerability write-ups, and proof-of-concepts (PoCs) created as part of my learning in cybersecurity and preparation for Google Summer of Code (GSoC) 2026.

---

🛠️ Tools

• scan_headers.py – Checks HTTP security headers and warns if critical headers are missing.
• url_params_finder.py – Extracts URL query parameters for IDOR, XSS, and logic-flaw testing.
• zap_header_alerts.py – Automates detection of missing security headers using OWASP ZAP API alerts.

---

📂 Contents

• PDF vulnerability write-ups
• Security testing scripts & small tools
• Notes from labs and practice (OWASP, PortSwigger, TryHackMe)

---

🔐 Open Source Contributions

• ✅ OWASP Dependency-Check

  • Merged PR: Documents external data sources & hostnames
    dependency-check/DependencyCheck#8219

• ✅ OWASP ZAP

  • Documentation improvements in zap-api-docs
  • Working on API usage guidance and automation examples

---

🎯 Focus Areas

• Web Penetration Testing
• OWASP Top 10 (XSS, SQLi, CSRF, IDOR, SSRF)
• Recon & vulnerability discovery
• Automation with OWASP ZAP
• Secure coding practices

---

⚖️ Ethics

All research here is performed on intentionally vulnerable labs, test environments, or systems where I have explicit permission. No illegal or unauthorized testing.

---

👤 About Me

Aspiring cybersecurity contributor focused on open-source security tooling and web application security research.

GitHub: https://github.com/SachinAditya