Md Uddin

In my NIIT Cybersecurity GenAI Advanced Program capstone, I conducted VAPT across a simulated Active Directory network, the OWASP Mutillidae web application, and its MySQL database. I identified 41 findings and documented prioritized remediation recommendations.

I demonstrated full domain compromise in the simulated environment, including capturing and cracking a domain credential and gaining a SYSTEM-level session on the Domain Controller. I also tested web application and database weaknesses, including SQL injection and cross-site scripting.

I assessed Wazuh SIEM detection coverage across attack stages and found that automated response and containment were absent despite accurate alerting. I authored a penetration testing report with CVSS-rated findings and presented the results.

At India Post Payments Bank, I operate customer-facing banking kiosk services and reported three potential fraud incidents for escalation to management. Observing real-world fraud led me to study cybersecurity, including Linux, Python, and networking.