Pinaki Mondal
Security Engineer at watchTowr
Kolkata, West Bengal, India
Summary
🤩
RockstarPinaki Mondal is a Security Engineer with eight years of hands-on experience in offensive security, vulnerability research, and tooling, currently based in Kolkata and working at watchTowr. He has a strong track record as a back-end developer on notable open-source security tools—contributing core functionality, setup and authentication improvements to the TIDoS web-application pentest framework and enhancing CSRF auditing in XSRFProbe. At Enable Security and RedHunt Labs he focused on VoIP and web security, modernizing SIPVicious components, porting code to newer Python versions, and improving robustness and maintainability. Pinaki combines practical exploit-focused research with production-grade engineering, often improving tooling operationality (install/setup scripts, exception handling, and core file management) rather than just PoC research. Colleagues describe him as an infectiously curious engineer who prefers to fix and harden the plumbing of security tools as much as discover the bugs they find.
7 years of coding experience
3 years of employment as a software developer
Stackoverflow
2,804reputation
361kreached
59answers
12questions
networking
top-5%
flask
top-5%
python
top-5%
beautifulsoup
top-5%
Github Skills (39)
debug10
penetration-testing10
python10
apidoc10
vulnerability-scanners10
it-security10
hacking10
audit10
csrf10
bash10
voip10
sip10
security10
sips10
api10
Programming languages (9)
Github contributions (5)
0xInfection/XSRFProbe
Aug 2018 - Mar 2021
Role in this project:
Back-end Developer
Back-end DeveloperContributions:9 releases, 490 commits, 49 PRs in 2 years 7 months
Contributions summary:Pinaki contributed to the development of the XSRF Probe, a tool for detecting Cross Site Request Forgery vulnerabilities. Their work included implementing support for raw POST requests, adding banner and color scheme files, and creating form source files. The user also added various global variables and improved exception handling within the core program.
spiderbugbountyforgeryosinttoken-generation
0xInfection/TIDoS-Framework
Jun 2018 - Dec 2019
The Offensive Manual Web Application Penetration Testing Framework.
Role in this project:Back-end Developer
Back-end DeveloperContributions:20 releases, 4 reviews, 761 commits in 1 year 6 months
Contributions summary:Pinaki's commits primarily involve modifications to the `runon.sh` script and the creation and modification of Python files, specifically `tidos.py` and `setup.py`. These changes suggest a focus on the framework's operational aspects, including setup, authentication, and core file management. The user appears to be adding new features to the tool, and the commit messages indicate improvements to the framework's core functionality.
pythonbugbountyweb-applicationenumerationosint
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.