** Information Security | AppSec | Web Security | Bug Bounty Hunter **
No se puede proteger lo que no se conoce.
Consultant Information Security enfocado en seguridad de aplicaciones, OWASP Top 10, análisis de superficies expuestas, recon web y prevención digital.
Mi portfolio profesional:
- Web Security
- Application Security
- Bug Bounty Research
- OWASP Top 10
- Broken Access Control
- IDOR
- API Security
- Authentication & Session Testing
- Reconnaissance
- JavaScript Endpoint Analysis
- Exposed Secrets Review
- CWE Mapping
- CVE Research
- Impact-driven Validation
Estoy construyendo una metodología propia para investigación web combinando recon, análisis manual, clasificación de vulnerabilidades y documentación de impacto.
La metodología se enfoca en:
- Reconocer superficie expuesta
- Mapear endpoints y flujos sensibles
- Analizar JavaScript del frontend
- Revisar autenticación, sesiones y control de acceso
- Probar manualmente requests y responses
- Validar impacto real
- Clasificar vulnerabilidades con OWASP, CWE y CVE
- Documentar hallazgos de forma clara y reproducible
- Burp Suite
- Caido
- Charles Proxy
- Request interception
- Response comparison
- Payload testing
- Impact validation
- Nmap
- httpx
- subfinder
- nuclei
- katana
- ffuf
- gau
- waybackurls
- ParamSpider
- Python-assisted automation
- OWASP Top 10
- CWE Mapping
- CVE Research
- Vulnerability Classification
- Vulnerability Chaining
- Exposed Secrets Review
- Impact Analysis
Cybersecurity prevention project focused on practical education, secure habits, phishing awareness, account protection and digital exposure reduction.
Personal methodology for organizing recon, endpoint analysis, manual testing, access control review, CWE/CVE classification and technical documentation.
Commands, scripts and workflows for authorized reconnaissance, endpoint discovery, crawling and historical URL analysis.
Checklists for reviewing authentication, authorization, sessions, sensitive data exposure and basic security controls.
- Portfolio: [lcksec]https://lichq1337.github.io
- LinkedIn: [lcksec]https://www.linkedin.com/in/lisandrocragnolini/
AppSec · Bug Bounty · Web Security · Digital Security Prevention