At TGCSB, I performed web application security assessments and VAPT using an OWASP-based methodology. I identified and validated issues including SQL Injection, XSS, Broken Access Control/IDOR, and Path Traversal across test applications.
I used Burp Suite, OWASP ZAP, Nmap, and Wireshark for reconnaissance, traffic analysis, and exploit validation, then documented evidence for reporting. I also analyzed HTTP request and response flows and completed PortSwigger Web Security Academy labs.
I designed and implemented WebLock, an AI-powered adaptive intrusion detection and digital forensic system. It analyzes login activity, IP addresses, and user behavior patterns to flag suspicious activity in real time, and includes a honeypot redirection layer to capture attacker interactions.
I automated forensic log collection and report generation for WebLock and architected it for deployment across web, desktop, and mobile environments. My cybersecurity training includes certifications in Network Security Fundamentals, Security Operations Fundamentals, and Cloud Security Fundamentals from Palo Alto Networks.
