ARAFAT

$ whoami
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
Profile Image

IDENTITY: CONFIRMED

ACCESS LEVEL: root

$ hack_me.sh

$ chmod +x hack_me.sh

$ ./hack_me.sh

WHAT DO I DO?$ ./about_me.sh --role
>
MY SKILLS$ ./skills.sh --view
>
0110011001
1001110011
0011001100
1110011001
1001100110
Skills Explorer
SECURITY ENGINEER
ASPIRING ENTREPRENEUR
FINANCIAL INTELLIGENCE
WEB DEVELOPER
CONTACT ME$ ./connect.sh --secure
>
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
1
0
0
1
1
0
0
1
1
0
0
1
1
$ ls ~/proof
FEATURED
★ Most Notable
peer-reviewed · published 2026

Adaptive UI for Mobile Banking — Enhancing UX through Machine Learning

Q1 JournalImpact Factor 4.5Open AccessArray · Elsevier

Co-authored research, a Daily Star feature, and national recognition — the proof beyond the projects.

Published Research
Elsevier Array (Q1) — DOI 10.1016/j.array.2026.100901
Press & Media
Featured in The Daily Star
Recognition
URC 2021 Global Champion · Top 1% TryHackMe
$ ls ~/work
SECURITY
9CVEs disclosed

Broken Access Control, IDOR & data exposure in WordPress plugins — responsibly disclosed via Patchstack.

cd security-research
BUILD
25+projects shipped

Security tools, DevSecOps automation & real-world web apps — from research to production.

cd projects
$ ls ~/write
15articles

What I Write About

Security, building businesses, psychology, and how the world works.

cd articles
$ ls ~/etc
EXTRACURRICULAR
URC Logo

2021 URC Global Champion

Software and Communication Lead of team MIST Mongol Barota for the University Mars Rover Challenge.

Leadership

Leadership

President of MIST Cyber Security Club (2023-2024)

CTF Competitions

CTF Competitions

CTF Player and Problem Solver. Ranked top 1% in TryHackMe.

Sports

Sports

Active participant in sports like Football, Cricket, Kickboxing, Swimming, Table Tennis, Badminton, etc.

Hobbies

Hobbies

Love Reading, Writing, and Travelling.

Conference

MIST LEETCON 2023

Event Organizer for Bangladesh's first international cybersecurity conference, hosting 3,500+ participants.

CTF Event

Flaghunt 2023

Event Host for National CTF Competition in collaboration with CTFBD.

Cyber Drill

Cyber Drill 2023

Organizer for Financial Institute & Critical Information Infrastructures Cyber Drill.

Seminar

Cyber Threats Seminar

Host for emerging cyber threats seminar with Armed Forces Division of Bangladesh.

~/missions/skill-universe/launch.sh
stream: live
ARAFAT © 2026 - ALL RIGHTS RESERVED
Turn on the terminal...
TURN ON YOUR
CLICK TO ENTER OR WAIT 4s
SYSTEM.AUTO_BOOT IN 00:04

Easin Arafat - Application Security Engineer

Easin Arafat is an Application Security Engineer at Startise, working on the xCloud cloud hosting platform. He is a graduate of the Military Institute of Science and Technology (MIST) and the Former President of MIST Cyber Security Club.

About Easin Arafat

Easin Arafat specializes in application security, penetration testing, DevSecOps, and secure coding practices. He works at the intersection of product features, infrastructure systems, and real-world operational constraints. His expertise spans Docker security, Nginx and networking, multi-tenant isolation, and CI/CD pipeline security.

Security Research and CVEs

Easin Arafat is a security researcher credited on the Patchstack Vulnerability Disclosure Program under the handle n0_arafat_n0. He has responsibly disclosed 9 CVEs in WordPress plugins, including CVE-2025-62039 (Sensitive Data Exposure, CVSS 7.5), CVE-2025-58680, CVE-2025-64277, CVE-2025-59562, CVE-2025-58981, CVE-2025-62932, and CVE-2025-62931 — covering Broken Access Control, Insecure Direct Object Reference (IDOR), and Sensitive Data Exposure.

Published Research and Recognition

Easin Arafat (Sheikh Easin Arafat) is a co-author of the peer-reviewed paper "Adaptive User Interface for Mobile Banking Apps: Enhancing UX through Machine Learning", published in Array (Elsevier, Q1 journal, open access), DOI 10.1016/j.array.2026.100901. He was featured in The Daily Star for cybersecurity education and the events of the MIST Cyber Security Club, organized MIST LEETCON 2023 (Bangladesh's first international cybersecurity conference, 3,500+ participants), and was a 2021 University Rover Challenge Global Champion with Team MIST Mongol Barota.

Professional Experience

Areas of Expertise

Connect with Easin Arafat