Paul Jeremiah B
Application Security Engineer · Zoho · CTF · OSINT
I build my own tooling for web, API and mobile security testing, and bring in AI as needed to keep adapting. An occasional CTF player and challenge author.
Read the blog research, findings & tooling
Projects
PenJester
A Burp Suite extension for manual access-control testing: IDOR, privilege escalation and tenant isolation, with evidence to back each verdict.
Visitj0
BetaJzero, a small web scanner (DAST) I built for fun, with AI-assisted scans behind a clean, simple UI. Launching soon.
Visittweet-machine
An OSINT tool that recovers deleted tweets, replies, old bios and timestamps, even from suspended accounts.
View on GitHub
Recognition & CTF
- Hall of Fame
- Postmark, Atlassian and Canva, for reporting email security and web application vulnerabilities.
- TamilCTF
- CTF contributor and challenge creator since 2020.
Elsewhere

A talk On stage
