Pema Gurung

At Mindrisers Institute of Technology (Mindrisers Consortium Pvt. Ltd.), I executed VAPT across web applications, RESTful APIs, and network environments, following OWASP and NIST testing frameworks.

I identified and exploited web vulnerabilities including SQLi, XSS, IDOR, and JWT token flaws, and delivered proof-of-concept exploit chains. I also conducted vulnerability sweeps with Nessus, OpenVAS, and Nmap, mapping findings to CVSS v3.1 severity scores.

I developed and tested custom Snort IDS/IPS rules, monitored traffic with Wireshark and SIEM log correlation, and configured firewall ACLs, NAT policies, and VLAN segmentation using Cisco Packet Tracer.

On a practical project, I built a Python CLI malware scanner that queries the VirusTotal API and quarantines threat files. I’m seeking an entry-level VAPT or Offensive Security internship where I can apply practical security testing and reporting skills.