Ashish Dhone

CTO

Pune, Maharashtra, India9 yrs 2 mos experience

Key Highlights

  • Top Bug Bounty Hunter for major tech companies.
  • Multiple CVEs reported in high-profile applications.
  • Recognized as Most Valuable Security Researcher.
Stackforce AI infers this person is a Cyber Security Expert with extensive experience in vulnerability assessment and penetration testing.

Contact

Skills

Core Skills

Cyber SecurityPenetration Testing

Other Skills

Network SecurityWeb Application SecurityRed TeamingVulnerability AssessmentPurple TeamingThreat ModelingSAST & DASTAPI Penetration TestingBug bountyIncident ManagementMobile Application SecurityMemory ForensicsDigital ForensicsVulnerability ManagementVulnerability Research

About

$(whoami) █► Ashish Arun Dhone $(Bio) ♦ Offensive Security Lead at Mindpool Technologies ♦ Ex: Cyber Security Consultant at Emirates NBD , Dubai ♦ Ex: Cyber Security Expert at Entel S.A. Chile ♦ Ex : Lead Penetration Tester at Persistent Systems. ♦ Independent Security Researcher at Synack, Hackerone, Bugcrowd and Yogosha. $(CVEs) ♦ CVE-2025-49546 - Improper Access Control in Adobe ColdFusion ♦ CVE-2021-37999 - UXSS in Google Chrome ♦ CVE-2021-31832 - Stored XSS in McAfee DLP ♦ CVE-2020-35745 - Privilege Escalation- Unauthenticated access to Admin Portal in PHPGurukul ♦ CVE-2020-25925 - Reflected XSS in IceWarp WebClient $(HONORS & AWARDS) ♦ MSRC 2025 Q2 Leaderboard ♦ MSRC 2025 Q1 Leaderboard ♦ MSRC 2024 Q4 Leaderboard ♦ MSRC 2024 Q3 Leaderboard ♦ MSRC 2024 - MVR - Most Valuable Security Researcher Leaderboard ♦ MSRC 2024 Q2 Leaderboard ♦ MSRC 2024 Q1 Leaderboard ♦ MSRC 2023 Q3 Leaderboard ♦ MSRC 2023 - MVR - Most Valuable Security Researcher Leaderboard ♦ MSRC 2023 - Q1 Leaderboard ♦ Black Hat MEA 2023 CTF Finalist - Riyadh, Saudi Arabia ♦ National Crime Record Bureau - Ministry of Home Affairs India - CCTNS Bug Bounty Winner ♦ Top 120's in World at Google Hacker's Ranking. ♦ Black Hat MEA 2022 Speaker and CTF Finalist - Riyadh, Saudi Arabia - The only Indian team to qualify for the CTF finals, and I was leading the team as a Captain also my research was selected in the call for papers at Black Hat MEA and I was invited as a Speaker. ♦ BOUNTYCON – FACEBOOK & GOOGLE selected all over Asia region at Facebook’s HQ in Singapore. ♦ Acknowledged, Rewarded and listed in “HACKER’S HALL OF FAME" For Finding Several Security Flaws in, ✔ Google ✔ Apple ✔ Microsoft ✔ Facebook ✔ Shopify ✔ Gitlab ✔ AT&T ✔ Western Union ✔ Paytm ✔ Swiggy and several other 300+ Top Fortune Companies. $(Certifications) ♦ Altered Security - Certified Red Team Professional (CRTP) ♦ EC-COUNCIL - Licensed Penetration Tester LPT (Master) ♦ EC-COUNCIL - Certified Penetration Testing Professional (CPENT) ♦ Web Application Penetration Tester eXtreme - eWPTX v2.0 ♦ EC-COUNCIL - Computer Hacking Forensic Investigator (CHFI) ♦ EC-COUNCIL - Digital Forensic Essential (DFE) ♦ EC-COUNCIL - Certified Ethical Hacker Master (CEH Practical) ♦ EC-COUNCIL - Ethical Hacking Essentials (EHE) ♦ EC-COUNCIL - Certified Ethical Hacker (CEH v10)

Experience

Mindpool technologies ltd.

Offensive Security Lead

Jan 2025Present · 1 yr 2 mos · India · On-site

Emirates nbd

Cyber Security Consultant

Aug 2024May 2025 · 9 mos · Dubai, United Arab Emirates · On-site

Yogosha

Security Hunter

Aug 2023Present · 2 yrs 7 mos · Remote

Entel

Cyber Security Expert

Jun 2023Mar 2024 · 9 mos · Santiago Metropolitan Region, Chile · Remote

Persistent systems

3 roles

Lead Penetration Tester

Apr 2022Jun 2023 · 1 yr 2 mos

Network SecurityWeb Application SecurityRed TeamingVulnerability AssessmentPurple TeamingPenetration Testing+5

Senior Information Security Analyst

Promoted

Feb 2022Apr 2022 · 2 mos

Incident ManagementNetwork SecurityWeb Application SecurityMobile Application SecurityMemory ForensicsRed Teaming+9

Information Security Analyst

Jul 2020Feb 2022 · 1 yr 7 mos

Network SecurityComputer ForensicsWeb Application SecurityVulnerability ScanningCyber Threat Hunting (CTH)Red Teaming+7

Hack the box

Penetration Tester

Mar 2021Present · 5 yrs

Synack red team

Security Researcher

May 2020Aug 2024 · 4 yrs 3 mos · Redwood City, California, United States

Apple

Bug Bounty Hunter

Jan 2020Present · 6 yrs 2 mos

Google

Bug Bounty Hunter

Jan 2019Present · 7 yrs 2 mos

Bugcrowd

Independent Security Researcher

Jun 2018Present · 7 yrs 9 mos

Hackerone

Independent Security Researcher

Apr 2018Present · 7 yrs 11 mos

International institute of information technology, pune infotech park, hinjawadi, pune 411057

Student

Jun 2015Jun 2019 · 4 yrs · Pune/Pimpri-Chinchwad Area

Education

EC-Council University

Master's degree — Cyber Security

Apr 2023Jan 2025

International Institute of Information Technology, Pune Infotech Park, Hinjawadi, Pune 411057

BE - Bachelor of Engineering — Information Technology

Jan 2015Jan 2019

ACM MEMBER

VICE CHAIR

Arizona University Pune

CERTIFIED ETHICAL HACKER

School Of Scholars, Nagpur

10 and 12

Stackforce found 100+ more professionals with Cyber Security & Penetration Testing

Explore similar profiles based on matching skills and experience