I'm Karan Vaniya.

Web Application Security Researcher | Bug Bounty Hunter | Offensive Security Enthusiast. I specialize in identifying security vulnerabilities in modern web applications through penetration testing, vulnerability research, and responsible disclosure.

Buy me a coffee

Get in Touch!

Security Researcher

Burp Suite Nuclei Python JavaScript Linux Bash Recon Vulnerability Research

ABOUT

I am Karan Vaniya (Bitex / b1t3x0p), a passionate Ethical Hacker and Bug Bounty Hunter with expertise in identifying security vulnerabilities in modern web applications.

🏅 Achievements:
✨ Featured in NASA's Hall of Fame for bug discovery
🏆 Recognized as IBR Achiever – India Book of Records for cybersecurity contributions

🎯 Expertise: Web Exploitation, OSINT (Open Source Intelligence), Reconnaissance & Asset Discovery, Penetration Testing, Red Teaming, Network Security

💻 I specialize in XSS, SSRF, Open Redirects, Authentication Bypasses, Account Takeover Vectors, Business Logic Flaws, and parameter discovery. My mission: "Making the internet a safer place through ethical hacking and responsible disclosure."

My Journey

Journey Timeline

🏅 NASA Hall of Fame Recognition

2024 - 2026

Featured in NASA's Hall of Fame for discovering and responsibly disclosing critical security vulnerabilities. Conducted thorough vulnerability assessment and provided comprehensive exploitation documentation.

Recognition Achievement

🏆 IBR Achiever – India Book of Records

2023 - Present

Recognized as an official IBR Achiever for exceptional contributions in cybersecurity research and ethical hacking. Contributed to vulnerability research that helped improve security practices across multiple organizations.

National Recognition

🔐 Active Bug Bounty Hunter & Security Researcher

2020 - Present

Actively hunting vulnerabilities across multiple bug bounty platforms and conducting independent security research. Discovered and reported critical vulnerabilities in web applications, APIs, and infrastructure.

Continuous Research

🛠️ Security Tooling & Automation

2021 - Present

Developed custom security tools: BitexRecon (all-in-one reconnaissance toolkit), SecretFinder (sensitive data discovery in JS files), LostFuzzer (automated nuclei DAST scanning). Open-source projects with 40+ repositories.

GitHub

SKILLS

Security Tools

Burp Suite Pro Nuclei Subfinder Amass Waybackurls Paramspider Katana Metasploit

Programming Languages

Python JavaScript Bash/Zsh Shell Script HTML/CSS SQL Go

Vulnerability Types

XSS SSRF Open Redirects Auth Bypasses Account Takeover Authorization Flaws Logic Flaws

Security Methodologies

OSINT Reconnaissance Pentesting Red Teaming Network Security OWASP Top 10 Disclosure

Technologies & Platforms

Linux/Kali Web Applications REST/GraphQL APIs Databases Cloud Infrastructure Auth Protocols Network Protocols

                        
                        ZeroDayCops Projects
                    

                         Founder Repository
                         Organization
                         Official Website
                         Security Research
                         Tech-Focused Team
                    

                        
                        Specializations
                    

                         Bug Bounty
                         Ethical Hacking
                         Vuln Research
                         Subdomain Discovery
                         Secret Detection
                         Automation
                    