Sherasiya Mohammadtehan Gulammohyudin

Hi, I'm Sherasiya Mohammadtehan Gulammohyudin (TehanG07), a Cyber Security Professional, Web Application Penetration Tester, and Bug Bounty Hunter with a strong passion for identifying and responsibly disclosing security vulnerabilities.

Over the years, I have reported 400+ security vulnerabilities across web applications and have been recognized with 35+ Hall of Fame acknowledgements from organizations including NASA, Cisco, government organizations, and other companies for responsible vulnerability disclosure.

My primary expertise includes:

Web Application Penetration Testing (WAPT)
Vulnerability Assessment & Penetration Testing (VAPT)
Bug Bounty Hunting
OWASP Top 10 Security Testing
API Security Testing
Authentication & Authorization Testing
Business Logic Testing
Manual Web Security Assessment
Security Reconnaissance & Attack Surface Analysis

I specialize in manual security testing because many high-impact vulnerabilities require human reasoning beyond automated scanners. My testing approach focuses on understanding application logic, identifying real-world attack paths, validating vulnerabilities, and providing practical remediation guidance.

Throughout my journey, I have worked with a wide range of web technologies, security tools, and reconnaissance methodologies. I continuously improve my skills by researching emerging attack techniques, studying newly disclosed vulnerabilities, participating in responsible disclosure programs, and building custom automation to support security assessments.

In addition to security testing, I enjoy sharing cybersecurity knowledge with the community. I create educational content, write technical articles, and develop structured learning materials focused on web security, bug bounty hunting, penetration testing, and secure development practices.

I also provide professional services including:

Web Application Penetration Testing
Vulnerability Assessment (VAPT)
Security Consulting
Bug Bounty Training
Cyber Security Awareness & Technical Training
Security Review and Risk Assessment

Experience

Freelance Bug Hunter & Web Security Tester

Reported over 400+ validated security vulnerabilities
Received 35+ Hall of Fame recognitions
Performed manual security assessments on numerous web applications
Conducted authentication, authorization, session management, API, business logic, and OWASP Top 10 testing
Helped organizations improve their security posture through responsible disclosure

Certifications

Certified Ethical Hacker (CEH v13) – EC-Council

Mission

My goal is to make the internet safer by helping organizations identify security weaknesses before attackers can exploit them. Through responsible disclosure, continuous learning, and knowledge sharing, I strive to contribute to a stronger cybersecurity ecosystem while mentoring aspiring security researchers and ethical hackers.