Codebreakers Chronicles: Ethical Hacking Journey with Ganesh Bagaria

Every journey begins with curiosity. For me, it started in my teenage years, fueled by the intriguing idea of ethical hacking into accounts and understanding the unseen digital world. That spark of fascination grew over the years, shaping my path into cybersecurity.

The Early Years: Exploring Technology

During my B.Tech. at Rai University, Ahmedabad, I immersed myself in technology, graduating as a Gold Medalist in Computer Science. I explored diverse fields, from winning hackathons to creating innovative projects like an RFID-based billing system. These experiences taught me to combine creativity with technical skills to solve real-world problems.

Freelancing: A Foundation in Tech

In 2018, I ventured into freelancing, completing over 100 projects ranging from API development to web scraping. While it was rewarding, something felt missing. I realized freelancing didn’t provide the immense satisfaction I craved—it lacked the thrill and deeper impact I sought in my work.

Discovering Bug Bounty Hunting

Everything changed in 2020 when I discovered bug bounty hunting. From my first report in October of that year, I was hooked. The challenge of uncovering vulnerabilities and the joy of making systems safer brought a level of fulfillment I hadn’t found elsewhere.

Through platforms, I’ve identified and reported over 100 vulnerabilities for organisations like BBC, QIWI, Amazon, Max Healthcare, Affirm, and PUBG. Each discovery deepened my expertise and reinforced my commitment to securing the digital landscape. My dedication and contributions have earned me a spot among the top 300 hackers on the all-time leaderboard on—a recognition that fuels my passion and drive in this field.

One of my proudest achievements has been identifying critical vulnerabilities in widely-used software, earning me four CVE IDs: CVE-2021-24211, CVE-2021-24176, CVE-2021-38621, and CVE-2021-38622. These accomplishments not only highlight my technical skills but also underscore the importance of vigilance in maintaining a secure digital ecosystem.

Professional Growth and Contributions

In 2023, I joined DigiSec360 as a Cybersecurity Analyst, conducting penetration tests for web apps, mobile apps, and APIs. The role complements my bug bounty experience, allowing me to apply and expand my skills while protecting organisations from evolving threats.

Beyond my professional roles, I’ve contributed to the cybersecurity community by developing tools like Subcapture, which identifies vulnerable subdomains, and Proxy Extractor, which verifies free proxies. These projects reflect my commitment to innovation and empowering others in cybersecurity.

What Drives Me

Cybersecurity is more than a job—it’s my passion. The thrill of uncovering vulnerabilities and the satisfaction of securing systems inspire me daily. Each challenge keeps me on my toes, driving me to learn and adapt in this dynamic field.

Advice for Aspiring Hackers

To anyone considering a career in cybersecurity: Stay curious, embrace challenges, and never stop learning. Whether starting with bug bounties or exploring open-source tools, persistence and curiosity will guide you.

Looking Forward

As I reflect on my journey, I’m grateful for the opportunities to make a difference. The road ahead promises new challenges and innovations, and I’m excited to continue exploring and contributing to the ever-evolving field of cybersecurity.