Jay Shalwala

I’m a Junior Penetration Tester and Red Team Security Researcher with hands-on experience in web application security testing, Active Directory attack simulation, network analysis, and vulnerability assessment. I’m currently completing the TCM Security PNPT certification with a focus on Active Directory penetration testing and red team operations.

Through Hack The Box lab practice and my own home Active Directory lab, I’ve performed systematic enumeration, exploitation chaining, and privilege escalation to achieve full system compromise. I document findings with MITRE ATT&CK mapping and CVSS-scored vulnerability reporting, and I’ve simulated AD techniques like NTLM hash capture, NetNTLMv2 relay attacks, Kerberoasting, AS-REP Roasting, DCSync, and Golden Ticket forging.

I also run independent bug bounty and OSINT research, including discovering client-side exposed secrets in a production JavaScript bundle and mapping the issue to OWASP categories with practical remediation guidance. My goal is to join a professional team where I can apply offensive security skills to junior penetration testing or VAPT work and grow through real-world engagements.