ARAFAT

Easin Arafat Application Security Engineer at Startise
cat bio.txt
I work on the xCloud hosting platform and research WordPress plugin security as n0_arafat_n0, with 9 CVEs disclosed through Patchstack. Graduate of the Military Institute of Science and Technology (MIST), Bangladesh, and former President of MIST Cyber Security Club.
Adaptive UI for Mobile Banking - Enhancing UX through Machine Learning
Co-authored research, a Daily Star feature, and national recognition — the proof beyond the projects.
Broken Access Control, IDOR & data exposure in WordPress plugins — responsibly disclosed via Patchstack.
Security tools, DevSecOps automation & real-world web apps — from research to production.
Case studies
- TermStream
A secure browser and mobile control plane for persistent AI coding sessions on infrastructure the user owns.
- Second Brain.Deck
A browser control deck for an interconnected Markdown vault, built to keep useful knowledge close to the moment it matters.
What I Write About
Security, building businesses, psychology, and how the world works.
Latest posts

2021 URC Global Champion
Software and Communication Lead of team MIST Mongol Barota for the University Mars Rover Challenge.
Leadership
President of MIST Cyber Security Club (2023-2024)
CTF Competitions
CTF Player and Problem Solver. Ranked top 1% in TryHackMe.

Sports
Active participant in sports like Football, Cricket, Kickboxing, Swimming, Table Tennis, Badminton, etc.
Hobbies
Love Reading, Writing, and Travelling.
MIST LEETCON 2023
Event Organizer for Bangladesh's first international cybersecurity conference, hosting 3,500+ participants.
Flaghunt 2023
Event Host for National CTF Competition in collaboration with CTFBD.
Cyber Drill 2023
Organizer for Financial Institute & Critical Information Infrastructures Cyber Drill.

Cyber Threats Seminar
Host for emerging cyber threats seminar with Armed Forces Division of Bangladesh.