say User

I’m a Junior Penetration Tester with hands-on web application security expertise and a full-stack development background. I’ve completed 40+ advanced PortSwigger labs, building practical mastery of the OWASP Top 10 and turning my findings into clear, detailed writeups.

I develop and publish custom security tools on GitHub, including an API Misconfiguration Scanner and utilities for common security reconnaissance. I also write Python automation scripts to streamline repetitive testing tasks, improving both efficiency and accuracy during security assessments.

My workflow blends active exploitation practice with disciplined documentation. I run practical penetration testing on web applications and APIs, identify and document vulnerabilities, and deepen exploitation technique understanding through CTF challenges and lab scenarios.

Before specializing in security, I built responsive web and desktop applications as a Full-Stack Web Developer using Python, Django, MySQL, JavaScript, and ElectronJS. That developer perspective strengthens how I approach root-cause analysis, secure coding practices, and how vulnerabilities emerge in real systems.