01Research
Browser Syncjacking: New Attack Technique
2025SquareX Discloses 'Browser Syncjacking' - a New Attack Technique that Provides Full Browser and Device Control Putting Millions at Risk.
Hello, I'm
Sunkugari Tejeswara Reddy
Software Engineer at Zscaler
Software Engineer at Zscaler. I build and break things.
Get to know me
About Me
Software Engineer at Zscaler. I build and break things.
Education
2021-2025
Bachelor of Technology - B.Tech · Computer Science and Engineering
Indian Institute of Technology, Tirupati
- Department Rank 1 in first year
- Branch change to CSE based on academic excellence
CGPA 8.46
2021
Senior Secondary
State Board of Intermediate Education, Telangana
Score 98.4%
2019
Secondary
Board of Secondary Education, Andhra Pradesh
CGPA 10.0
Latest highlights
Featured
02Conference
BlackHat MEA 2025 Speaker
2025Had the opportunity to present SquareX at BlackHat Middle East & Africa, held in Riyadh, Saudi Arabia 🇸🇦
03Conference
DEF CON 33 Demo Labs
2025Extension at DEF CON 33 Demo Labs: Copycat is a red team browser extension that simulates 10+ in-browser identity attacks.
04Workshop
Nullcon Goa 2026 — Workshop Speaker
2026Inside the Browser — Exploiting, Detecting & Containing Malicious Extensions in Modern Web Ecosystems. A 2-hour hands-on workshop on browser extension attacks.
My professional journey
Experience
Zscaler
Software Engineer
- Joined Zscaler following their acquisition of SquareX, continuing work on browser security and cloud infrastructure.
- Contributing to enterprise-scale security solutions and threat intelligence platforms.
- Working on integrating SquareX's browser security technology into Zscaler's product ecosystem.
Cloud SecurityGCPKubernetesPythonJavaScript
SquareX
Software Engineer
- Built browser extension analysis pipeline with static scanning, sandboxing, and risk scoring for malicious extension detection.
- Discovered critical browser vulnerabilities including syncjacking, polymorphic extensions, and browser-native ransomware.
- Developed Data Splicing Attack PoC presented at BSidesSF and Identity Attack Simulator for DEF CON 33.
Chrome ExtensionsGCPCloud RunBigQueryRedisKubernetesDockerPython
IIT Tirupati
Software Developer
- Developed Department of Computer Science and Engineering website at IIT Tirupati.
- Ensured responsive design, functionality, and enhanced user experience.
- Collaborated with faculty for requirements and content integration.
Web DevelopmentReactNode.js
Auroitech
Software Development Intern
- Developed 'Dhrishti' mobile app using Flutter for patient care with full DevOps lifecycle.
- Configured iOS deployment using Xcode and published to App Store.
- Built REST APIs for patient registration system with efficient data management.
FlutterXcodeiOSAndroidREST APIDevOps
Things I've built
Featured Projects
Browser Extension Analysis
SquareX
Distributed multi-layer browser extension analysis pipeline for detecting malicious extensions at scale. Integrates static scanning, dynamic sandboxing, and semantic analysis with multi-signal risk scoring.
- Designed distributed analysis pipeline with metadata intelligence, static scanning, and dynamic sandbox execution.
- Integrated Semgrep, RetireJS, and custom AST parsers to detect unsafe APIs and obfuscation patterns.
- Built Kubernetes-based cluster enabling horizontally scalable and fault-tolerant extension analysis.
KubernetesDockerGCPPlaywrightPythonJavaScriptSemgrepStatic Analysis
Year of Browser Bugs (YOBB)
SquareX Research
Research initiative uncovering critical browser vulnerabilities and emerging attack vectors. Developed PoC exploits for syncjacking, polymorphic extensions, and browser-native ransomware.
Browser SecurityChrome ExtensionsAI SecurityVulnerability Research
IdentityAttackSimulator
SquareX
Chrome extension simulating 10 identity-based cyberattacks for security awareness and education. Demonstrates credential stuffing, phishing, cookie theft, and session hijacking scenarios.
DEF CON 33 BlackHat MEA
Chrome ExtensionsJavaScriptSecurity ResearchRed Teaming
Security Research
Angry Magpie: DLP Bypass Toolkit
SquareX
Open-source browser extension demonstrating Data Splicing Attacks bypassing enterprise DLP systems. Implements five attack vectors including data transcoding, sharding, and channel smuggling.
BSides SF 2025 BlackHat MEA
Chrome ExtensionsJavaScriptDLPSecurity Research
Dhrishti
Auroitech
Healthcare mobile app for patient care with EMR integration and real-time appointment tracking. Features family profile management, medical report viewing, and prescription notifications.
FlutterXcodeiOSAndroid
Recognition & milestones
Achievements
BlackHat Middle East & Africa
2025Selected to present original offensive security research: Identity Attack Simulator (identity attack simulation extension) and Angry Magpie (DLP bypass tool) at BlackHat MEA 2025.
Leadership
2024-2025Honored with a recognition award from Dr. Satyanarayana, Director of IIT Tirupati, for spearheading the institution's Placement Season 2024–25 and representing 450+ graduating students.
Bronze Medal - Inter IIT TechMeet 12.0
2023Achieved 3rd Position among all other IITs in Inter IIT Techmeet 12.0 and won Bronze Medal in low-cert cybersecurity problem statement given by CERT-IN Organization held at IIT Madras.
Academic Excellence
2021-2022Secured Department Rank 1 in first year at IIT Tirupati, leading to branch change to Computer Science and Engineering. Also ranked in Top 1% in JEE Advanced, Top 1.7% in JEE Mains (among 1M+ candidates).
Positions of Responsibility
Leadership
Apr 2024 - Jun 2025
Students' Placement Head
IIT Tirupati
- Represented 450+ Students from the 2025 Graduating Batch as a Placement Coordinator, involved in resolving Students queries in all the Placement Processes
- Led a team of 30 Placement Representatives ensuring smooth communication between Students and the placement officers
May 2023 - Jun 2025
Department of Computer Science and Engineering - Representative
IIT Tirupati
- Acted as a bridge between faculty and students, communicating academic concerns, suggestions, and facilitating effective dialogue to improve the academic environment.
- Coordinated with faculty to address student issues related to curriculum, exam schedules, and other academic matters, ensuring timely resolution.
- Involved in Class Committee Meetings with the Head Of Dept. and CSE Faculty discussing about Academic Related Things
Let's connect