Professional Summary
Cybersecurity student with a hands-on foundation in penetration testing fundamentals: OWASP Top 10, vulnerability assessment, and Python/Bash scripting, backed by an eJPT (eLearnSecurity Junior Penetration Tester) certification. Ranked in the top 1% on TryHackMe (Legend, 221 rooms completed) and at Professional rank on Hack The Box (Level 52), with practical lab experience identifying, exploiting, and documenting vulnerabilities across web applications and networked systems. Published 14 lab writeups on Medium documenting host and network penetration testing methodology. Pursuing HTB Certified Penetration Testing Specialist (CPTS), with lab practice in reconnaissance, exploitation, and post-exploitation. Seeking a Junior Penetration Tester / VAPT role, contributing to web, network, and application security assessments.
Technical Skills
| Offensive Security Tools |
Burp Suite, Nmap, Metasploit Framework (MSF), SQLMap, Hydra, Gobuster, Netcat, Wireshark |
| Frameworks & Standards |
OWASP Top 10, MITRE ATT&CK (awareness), CVE/CVSS scoring |
| Security Domains |
Web Application Security, Network Reconnaissance & Scanning, Password Attacks & Hash Cracking, Windows & Linux Privilege Escalation, Post-Exploitation, Service Enumeration & Fingerprinting, Vulnerability Assessment, Digital Forensics (Introductory) |
| Operating Systems |
Kali Linux, Ubuntu, Windows |
| Scripting & Development |
Python (automation scripts), Bash (security tooling) |
| Concepts |
TCP/IP, DNS, HTTP/HTTPS, OSI model, CTF methodology |
Projects
Personal Project
- Engineered a Bash-based cryptographic integrity verification tool that hashes files and directories and flags unauthorized modifications — directly applicable to host-based intrusion detection.
- Automated detection of tampered files using SHA-256 hashing, reducing manual verification effort.
- Structured alert output for clear, actionable reporting of detected changes.
- Demonstrates core skills: Bash scripting, file system forensics, security automation, and understanding of integrity-based detection.
Lab Writeups
- 14 published writeups: 11 eJPT (INE) lab walkthroughs covering vulnerability assessment, host and network attacks, Metasploit, exploitation and post-exploitation, plus a 3-part Nmap and networking fundamentals series. All writeups on Medium. Selected:
- "Before You Touch Nmap: Networking Fundamentals Every Beginner Must Understand (Part 1)"
Covers TCP/IP, subnetting, OSI model, DNS, and their application to network reconnaissance — demonstrates foundational knowledge essential for both offensive and defensive roles.
- "Nmap Host Discovery — Finding Targets Without Making Noise (Part 2)"
Deep dives into stealth scanning techniques, host discovery flags, and minimising detection footprint — demonstrates practical offensive reconnaissance skills.
- "Host & Network Penetration Testing: System/Host Based Attacks CTF-2 — eJPT (INE)"
Documents exploitation of Windows and Linux vulnerabilities including privilege escalation and service abuse — demonstrates structured methodology and technical reporting ability.
- "Vulnerability Assessment CTF-1 — eJPT (INE)"
Documents web enumeration, hidden endpoint discovery, and vulnerability identification methodology used in a structured assessment simulation.
- Technical writing demonstrates the ability to document security findings clearly and in a structured way.
Hands-On Lab Training — TryHackMe
- Completed Junior Penetration Tester path: covered reconnaissance, exploitation, post-exploitation, web hacking.
- Completed Web Fundamentals path: OWASP Top 10 vulnerabilities (SQLi, XSS, IDOR, broken auth), BurpSuite interception, and web enumeration techniques.
- Completed Cyber Security 101 path, which covers SOC fundamentals, threat intelligence, SIEM concepts, and log analysis.
- Completed Pre-Security path: networking (TCP/IP, DNS, HTTP), Linux command line, and Windows Active Directory fundamentals.
- Top 1% of TryHackMe users, with 221 rooms completed and 33 badges.
Hands-On Lab Training — Hack The Box
- Pursuing the Certified Penetration Testing Specialist (CPTS) learning path.
- 33,985 XP earned across 10 active weeks.
Experience & Simulations
- Completed a job simulation modelling the cybersecurity team responsibilities at a global payment technology company.
- Analyzed simulated phishing emails to identify social engineering tactics and produced a security awareness training document targeting non-technical employees.
- Assessed organizational security risks and proposed controls — mirroring real-world security analyst workflows.
Education
Dr. D.Y. Patil Arts, Commerce & Science College, Pune
Affiliated to Savitribai Phule Pune University
Average SGPA: 8.56 (Semesters 1–4)
Languages
English (Working)
|
Hindi (Working)
|
Marathi (Professional)
All security activities were conducted in legal, authorized, and controlled learning environments.