Bio

Aaditya Purani is a Security Engineer at Amazon Web Services (AWS). Aaditya's primary areas of expertise are web/mobile application penetration testing, product security reviews, blockchain security, and source code review including reverse engineering. Previously, he was a Senior Security Engineer at Tesla for 3 years. He actively contributes to responsible disclosure programs and is included in the hall of fames for Google, Apple, and AT&T. Aaditya also participates in security capture the flag (CTF) from Perfect Blue which is globally ranked top-1 CTF team and is one of the founding members of UTC (United Texas Coalition). As a researcher, his most famous findings include BTCPay Pre-Auth RCE, Mattermost RCE, and Akamai Zero Trust RCE. As a writer, Aaditya has authored articles for InfoSec Institute, Buzzfeed, Hackin9, and DailyO. He also has 22 CVEs attributed to his findings. He was awarded by Hon. Prime Minister of India Narendra Modi and Hon. Prime Minister of Srilanka Ranil Wickremesinghe in 2017 for winning a global event GCCS 2017 CTF. In 2017, he interned at Bishop Fox as a security analyst & in 2018 he interned at Palo Alto Networks as a Threat Research Engineer. From 2019 to 2022, he worked at Tesla. Aaditya enjoys doing research & development into offensive and niche appsec subjects. He has also spoken about his collaborative research (''ElectroVolt: Pwning popular desktop apps while uncovering new attack surface on Electron'') at most prestigious cyber-security conferences: - Black Hat USA 2022 - DEFCON 30