I'm Swarnim Bandekar — a security researcher with an offensive focus. I spend most of my time breaking things, understanding how they fail, and writing about it so others can learn.

My work spans across web security, red teaming, penetration testing, and bug bounty hunting. I'm particularly drawn to the intersection of offensive security and web application security — whether that's tearing apart a website, auditing an API, or chasing bugs through complex workflows.

What you'll find here

  • CTF Writeups — Detailed walkthroughs of challenges I've solved
  • Vulnerability Research — Original findings and responsible disclosures
  • Bug Bounty Hacks — How do I actually hunt for bugs in real companies
  • Tool Development — Scripts and utilities I've built for security work

Connect

You can find me on GitHub, LinkedIn, X (Twitter), or Medium.

If you want to reach out about security research, collaborations, or just want to talk shop — DMs are open.