Sanoop Thomas
Review Board Member at ZeroString Tech Ventures
Singapore
Summary
🤩
Rockstar🎓
Top SchoolSanoop Thomas is a Singapore-based cybersecurity researcher, practitioner and founder with over a decade of hands-on experience in threat research, security assessments and automation. He currently serves on the Black Hat Review Board, leads security at Visa, and runs InfoSec Campus—where he produces a well-regarded podcast and community resources. Sanoop built practical training tools like the Xtreme Vulnerable Web Application (XVWA) and contributes to open-source security projects, often adding realistic vulnerability scenarios to help practitioners learn. A frequent conference speaker and organizer (BSides, null, OWASP, BlackHat), he blends consulting, product development and community building to improve internet safety. Notably, he pairs deep offensive research with product-minded delivery, turning complex exploits into reproducible learning artifacts and tooling.
12 years of coding experience
4 years of employment as a software developer
MCA, Computer Application, MCA, Computer Application at Tamilnadu College of Engineering, Coimbatore, TamilnaduB.Sc, Computer Science, B.Sc, Computer Science at St. Thomas College, Trichur, Kerala+2, Commerce with Computer Application, +2, Commerce with Computer Application at St.Aloysius H. S. S
English, Hindi, Malayalam, Tamil, Telugu
Stackoverflow
163reputation
31kreached
4answers
2questions
Github Skills (16)
php10
vulnerability10
web-application-security10
mysql9
sql-injection8
file-upload7
xss7
pcf-dev6
doxygen6
cron6
ios6
cloud-foundry6
android6
python6
debian6
Programming languages (7)
Github contributions (5)
s4n7h0/xvwa
Oct 2015 - Sep 2020
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1 review, 40 commits, 18 PRs in 4 years 11 months
Contributions summary:Sanoop primarily contributed to the XVWA web application by addressing bugs and implementing new features. The user updated various PHP files, including login, home, and setup, which likely involved correcting functionality and improving the application's structure. Furthermore, the user added new vulnerabilities, such as PHP Object Injection and Formula Injection, and fixed file path issues for file uploads.
mysqlapplication-securityknowledgesecurityphp
BSidesSG/2019
Oct 2020 - Mar 2021
Contributions:6 commits, 5 pushes, 1 branch in 4 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.