Kathan Patel
Cyber Security Analyst at McDonald's
Hyderabad, Telangana, India
Summary
🤩
Rockstar🎓
Top SchoolKathan Patel is a Cyber Security Analyst with six years of hands-on experience in threat research, hunting, and incident response across enterprise and cloud environments. He blends practical DFIR automation and threat-hunting workflows with a researcher’s mindset, having contributed to open-source tools like JSFScan.sh, HowToHunt, and Gxss that streamline JavaScript recon and vulnerability discovery for bug bounties. His background includes roles at HackerOne, Synack Red Team, Qualcomm, and now McDonald's, giving him exposure to both offensive research and large-scale corporate security operations. Kathan holds an MTech in Cyber Security and Incident Response from NFSU and is known for turning complex adversary techniques into simple, repeatable automation that speeds investigations. Notably, his JSFScan.sh integrates multiple recon tools to automatically surface JS endpoints and secrets, reflecting a knack for practical tool-building that directly accelerates vulnerability discovery.
6 years of coding experience
2 years of employment as a software developer
Master of Technology - MTech, Cyber Security and Incident Response, Master of Technology - MTech, Cyber Security and Incident Response at National Forensic Sciences University (NFSU)Bachelor of Engineering, Computer Engineering, Bachelor of Engineering, Computer Engineering at SAL ENGINEERING AND TECHNICAL INSTITUTE
English, Gujarati, Hindi, Marathi
Github Skills (11)
web-security10
automation10
bash10
automations10
bug-tracker10
bug-reporting10
bugtracking10
javascript9
subdomain8
github-ci6
githubaction-workflow6
Programming languages (8)
Github contributions (5)
KathanP19/JSFScan.sh
Jun 2020 - Nov 2022
Automation for javascript recon in bug bounty.
Role in this project:
Security Engineer
Security EngineerContributions:53 commits, 3 PRs, 45 pushes in 2 years 4 months
Contributions summary:Kathan primarily focused on building and automating JavaScript reconnaissance tools for bug bounty hunting. Their contributions include creating a core script (`JSFScan.sh`), incorporating various tools like `gau`, `subjs`, `httpx`, `hakrawler`, and `SecretFinder` to gather JavaScript file links, identify endpoints, and find secrets within JavaScript files. The user also integrated features for manual testing and report generation, demonstrating a strong understanding of automated vulnerability discovery in web applications.
security-toolsbugbountybugbounty-toolsecurityjavascript
KathanP19/HowToHunt
Aug 2020 - Oct 2022
Contributions:363 commits, 213 PRs, 338 pushes in 2 years 1 month
bughunting-methodologybugbountysecurityvulnerabilitiesvulnerability-management
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.