YUVARAJ K K

I’m a VAPT Analyst with hands-on experience in Web Application, API, and Mobile Application penetration testing, following OWASP Testing Methodology and PTES. In my current VAPT internship, I use tools like Burp Suite, Metasploit, Nmap, Nessus, Nikto, Wireshark, and Frida to execute the full attack lifecycle—reconnaissance through exploitation and post-exploitation—while mapping findings to MITRE ATT&CK techniques and CVE references.

I focus on identifying and responsibly disclosing critical vulnerabilities (e.g., SQLi, XSS, IDOR, authentication bypass, and sensitive data exposure) with CVSS-scored PoC evidence and clear remediation recommendations. I also automate security assessments with Python and Bash scripting to reduce manual effort, and I’ve built security-focused tools that strengthen real-world OSINT workflows and abuse-content detection.