M. Hardian Imam Fadila

Who I Am

Hallo, my name is M. Hardian Imam Fadila and i am a cybersecurity enthusiast and bug hunter with hands on experience in identifying and analyzing web application vulnerabilities. Skilled in vulnerability assessment, reconnaissance, and security testing, i focus on discovering security flaws that could impact system integrity and user data protection.

With practical experience in responsible disclosure and real world security research, i continuously improve my understanding of modern attack surfaces, web technologies, and secure development practices. My objective is to contribute to a safer digital ecosystem through ethical security testing and continuous learning.

Letter of Appreciation

Official Letter

University of San Diego

ITS · Bryan Teague · 2026

Official Letter

Drexel University

Information Technology · Dr. Pablo G. Molina · 2026

High Severity

Kementerian ESDM RI

ESDM-CSIRT · 2026

Medium Severity

Provinsi Bali

Diskominfo Bali · 2026

Medium Severity

Purbalingga CSIRT

Purbalingga-CSIRT · 2026

High Severity

DRPPS UMS

Surakarta · 2026

Career Experience

Independent Security Researcher

Global Bug Bounty Programs & Government CSIRT Integration | 2018 — 2025

Advanced Penetration Testing: Spearheaded comprehensive security audits on critical government and academic infrastructures, utilizing advanced reconnaissance methodologies to proactively mitigate systemic exploitation risks.
High-Impact Vulnerability Discovery: Successfully identified and validated high-severity vulnerabilities, including Sensitive Data Exposure (.env leakage) and PII Disclosure, maintaining a high standard of reporting accuracy for national-level institutions.
Specialized Technical Research: Conducted deep-dive analysis into complex attack vectors such as Regular Expression Denial of Service (ReDoS) and performed security posture assessments on Nginx architectures and HTTP/2 protocols.
Strategic Risk Documentation: Authored professional Proof of Concept (PoC) documentation, incorporating strategic business impact analysis and technical remediation roadmaps for stakeholders.

Security Environment Architect

Offensive Security Lab Development | 2025 — 2026

Advanced Research Environment: Engineered and optimized a highly efficient, portable offensive security environment designed for executing sophisticated penetration tests in stable and encrypted surroundings.
Automated Security Workflows: Developed custom automation scripts for vulnerability scanning and reconnaissance, significantly increasing the detection efficiency of security flaws across large-scale digital assets.
Client-Side Logic Analysis: Conducted in-depth behavioral analysis of client-side applications using advanced developer toolsets to simulate business logic manipulation and security bypasses.

Offensive Security Research & Vulnerability Assessment