---
title: "Ashish Kunwar - Vulnerability Researcher in Noida | Tal"
description: "Meet Ashish Kunwar, Ex-Microsoft(MSTIC/MDTI) | Vulnerability Researcher | CRTP | CRTO | CRTA | MCRTA | CRT-ID | CNSS | CAP | CCEP | ISO 27001-2022 Lead Auditor based in Noida. AI stack includes claude code, codex, and cursor. Explore public work links including github and medium."
image: "https://tal.club/meet/ashish-kunwar/share-image"
---

# Ashish Kunwar on Tal

## Headline

Ex\-Microsoft\(MSTIC/MDTI\) \| Vulnerability Researcher \| CRTP \| CRTO \| CRTA \| MCRTA \| CRT\-ID \| CNSS \| CAP \| CCEP \| ISO 27001\-2022 Lead Auditor

## About

As a Security Researcher II at Microsoft \(MSTIC\), I focus on advanced vulnerability research, detection engineering, and threat intelligence\. I specialize in discovering high\-impact vulnerabilities, developing scalable detections, and collaborating across teams to enhance response to emerging cyber threats\. 🔍 500\+ recognized vulnerability disclosures – acknowledged by organizations like Bank of Scotland, Appcelerator, and Pega, etc\. 🛡️ Multiple CVEs published, including: • CVE\-2020\-13093 – Directory Traversal in iSpyConnect Agent DVR • CVE\-2020\-12273/12274 – Exposed credentials & URL injection in TestLink • CVE\-2020\-24933/24934/24935 – XSS & Python code injection in ERPNext • CVE\-2021\-27512 – SQL Injection in ERPNext • CVE\-2021\-41349 – Spoofing in Microsoft Exchange Server • Also contributed to issues in Gifsicle \(null deref\), GNU nano \(memory leak\), and Erlang/OTP \(buffer overflow\) https://foss\.heptapod\.net/tryton/python\-sql/\-/issues/92 📰 Featured in major media: • Forbes – John Deere Security Research https://www\.forbes\.com/sites/paulfroberts/2021/06/20/under\-scrutiny\-big\-ag\-scrambles\-to\-address\-cyber\-risk • TechNadu – AgTech Server\-side Vulnerabilities https://www\.technadu\.com/researchers\-multiple\-server\-side\-flaws\-agricultural\-equipment\-giant\-john\-deere/293979 🎤 Talks & Panels: • DEF CON 29 – Speaker on John Deere/AgTech https://defcon\.org/html/defcon\-29/dc\-29\-speakers\.html • CornCon VII – IoT & Ag Cybersecurity Panel https://www\.youtube\.com/watch?v=oaVLTXPYIq0 • Hackers Meetup Conference – SSRF, RCE, Elasticsearch Takeovers https://www\.facebook\.com/photo\.php?fbid=2796621447288690&id=2050200718597437&set=a\.2114055168878658 • InfoSec Bug Bounty AMA – Research Q&A https://www\.sillydaddy\.me/infosec\-bugbounty\-ama/2020/10/06/Infosec\-Bugbounty\-AMA\-Ashish\-Kunwar\.html 🎓 B\.Tech in Computer Science – GD Goenka University 📜 Certifications – CNSS, CISSP, Burp Suite Pro I’m passionate about bridging offensive research with proactive defense, pushing boundaries in threat detection, and giving back to the security community through research, tools, and talks\.

## Location

Noida

## AI stack

claude code

codex

cursor

deepseek

railway

## Work experience

Vulnerability Researcher at Ganasec, May 2025 \- Aug 2026 · 1 yr 4 mos, India

Security Researcher II at Microsoft, Dec 2023 \- May 2025 · 1 yr 6 mos, Noida

Researcher at Microsoft, Apr 2022 \- Sep 2023 · 1 yr 6 mos, United States \(Remote from India\)

Security Researcher at Detectify, May 2021 \- Sep 2022 · 1 yr 5 mos

Security Researcher at Synack Red Team, Aug 2020 \- Sep 2022 · 2 yrs 2 mos

## Education

Bachelor of Technology \- BTech, Computer Science, GD Goenka University

Polytechnic, Computer Science, YBN UNIVERSITY

## Public links

- github: https://github\.com/dorkerdevil
- medium: https://medium\.com/@D0rkerDevil

[View the original profile](https://tal.club/meet/ashish-kunwar)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Person",
      "@id": "https://tal.club/meet/ashish-kunwar#person",
      "name": "Ashish Kunwar",
      "url": "https://tal.club/meet/ashish-kunwar",
      "image": "https://tal.club/meet/ashish-kunwar/profile-photo.jpg",
      "description": "Meet Ashish Kunwar, Ex-Microsoft(MSTIC/MDTI) | Vulnerability Researcher | CRTP | CRTO | CRTA | MCRTA | CRT-ID | CNSS | CAP | CCEP | ISO 27001-2022 Lead Auditor based in Noida. AI stack includes claude code, codex, and cursor. Explore public work links including github and medium.",
      "jobTitle": "Vulnerability Researcher",
      "worksFor": {
        "@type": "Organization",
        "name": "Ganasec"
      },
      "hasOccupation": {
        "@type": "Occupation",
        "name": "Vulnerability Researcher"
      },
      "homeLocation": {
        "@type": "Place",
        "name": "Noida"
      },
      "alumniOf": [
        {
          "@type": "EducationalOrganization",
          "name": "GD Goenka University"
        },
        {
          "@type": "EducationalOrganization",
          "name": "YBN UNIVERSITY"
        }
      ],
      "knowsAbout": [
        "claude code",
        "codex",
        "cursor",
        "deepseek",
        "railway"
      ],
      "sameAs": [
        "https://github.com/dorkerdevil",
        "https://medium.com/@D0rkerDevil"
      ],
      "mainEntityOfPage": {
        "@id": "https://tal.club/meet/ashish-kunwar#webpage"
      }
    },
    {
      "@type": "ProfilePage",
      "@id": "https://tal.club/meet/ashish-kunwar#webpage",
      "url": "https://tal.club/meet/ashish-kunwar",
      "name": "Ashish Kunwar on Tal",
      "description": "Meet Ashish Kunwar, Ex-Microsoft(MSTIC/MDTI) | Vulnerability Researcher | CRTP | CRTO | CRTA | MCRTA | CRT-ID | CNSS | CAP | CCEP | ISO 27001-2022 Lead Auditor based in Noida. AI stack includes claude code, codex, and cursor. Explore public work links including github and medium.",
      "dateModified": "2026-10-22T06:26:20.887Z",
      "isPartOf": {
        "@id": "https://tal.club/#website"
      },
      "mainEntity": {
        "@id": "https://tal.club/meet/ashish-kunwar#person"
      },
      "primaryImageOfPage": {
        "@type": "ImageObject",
        "url": "https://tal.club/meet/ashish-kunwar/profile-photo.jpg",
        "contentUrl": "https://tal.club/meet/ashish-kunwar/profile-photo.jpg",
        "caption": "Ashish Kunwar profile photo on Tal"
      },
      "inLanguage": "en-IN"
    }
  ]
}
```