online open to VAPT and pentest roles

ABUL KALAM AZAD

Junior Penetration Tester Web & Network VAPT

Final-year B.Tech student at KIIT with eJPTv2, CRTA and MCRTA. I test web apps and networks, score what I find with CVSS v3.1, write the report, then come back and retest the fixes.

view security work full vapt report
azad@sec: ~/profile

whoami

junior penetration tester / web app + network VAPT

B.Tech Electronics & Computer Science, KIIT Bhubaneswar · 2023-2027.

cat ./certifications

eJPTv2 · CRTA · MCRTA · ICCA · ISC2 CC

Validated findings
19full-scope VAPT
TryHackMe
Top 2%global · AIR 12
Certifications
5offensive & cloud
Security tools
3open source

cat ~/about.txt

01

About

~/about

I'm in my final year of B.Tech (Electronics & Computer Science) at KIIT Bhubaneswar and work as a junior penetration tester on web application and network VAPT. I test against PTES and OWASP WSTG v4.2, score with CVSS v3.1, map to CWE, and write reports a remediation team can work from.

My latest engagement was a grey-box assessment of four in-scope assets in a lab I built, start to finish: 19 validated findings (2 Critical, 7 High), a 97-page report with business impact and a prioritised fix plan, and a full retest. The scanners flagged 18 issues. I confirmed 11, threw out 7 as non-actionable, and found 8 they missed, 5 of them High.

Outside that I write small offensive tools in Python, mentor 20 to 25 students in the college cyber security society, and play on TryHackMe (Top 2% global) and Hack The Box. I'm looking for a VAPT or penetration testing role where I keep doing hands-on testing and writing up what I find.

ls ~/toolkit

02

Skills & Tools

~/skills

Web & Application Security

  • Burp Suite
  • Repeater
  • Intruder
  • Proxy
  • HTTP/S interception
  • OWASP Top 10
  • SQL Injection
  • XSS
  • IDOR
  • Authentication testing

Network Security

  • Nmap
  • Wireshark
  • Netcat
  • Port scanning
  • Service enumeration
  • Packet analysis
  • Network pentesting

Exploitation & Assessment

  • Metasploit
  • Nessus
  • Nikto
  • Nuclei
  • Privilege escalation
  • Vulnerability assessment
  • MITM / ARP spoofing

Red Team & Active Directory

  • MITRE ATT&CK TTPs
  • Kerberos attacks (fully patched AD)
  • Lateral movement
  • Stealth pivoting
  • Adversary simulation
  • Internal / external recon

Scripting & Tooling

  • Python
  • Scapy
  • Bash
  • Git / GitHub
  • Linux (Kali)
  • Tool development

Reporting & Standards

  • VAPT reporting
  • CVSS v3.1
  • CWE mapping
  • OWASP WSTG v4.2
  • PTES
  • NIST SP 800-115
  • Remediation guidance

Cloud Security

  • AWS
  • Azure
  • GCP red team techniques
  • IAM & RBAC
  • Compute & storage security
  • Cloud asset recon
  • MITRE Cloud ATT&CK

gpg --verify certs/*

03

Certifications

~/certifications
offensiveAug 2026

CRTA

Certified Red Team Analyst

CyberWarFare Labs

Verify
cloud · offensiveAug 2026

MCRTA

Certified Multi-Cloud Red Team Analyst

CyberWarFare Labs

Verify
offensiveFeb 2026

eJPTv2

Junior Penetration Tester

INE Security

Verify
cloudFeb 2026

ICCA

INE Certified Cloud Associate

INE

Verify
foundationalAug 2024

CC

Certified in Cybersecurity

ISC2

courseAug 2026

Azure Red Teaming

Introduction to Azure Red Teaming (course completion)

Altered Security

Verify

TryHackMe learning paths completed

ls -la ~/work

04

Security Projects

~/projects

featured engagement

Full-Scope VAPT: Web & Network Assessment

Grey-box assessment of four in-scope assets in a self-built lab: two Windows hosts, two web applications.

Repository

scope Self-built isolated lab · authorised engagement · findings reproduced under defined rules of engagement.

  • 2Critical
  • 7High
  • 19Validated total
  • 97Page report
  • Executed an end-to-end grey-box VAPT following PTES and OWASP WSTG v4.2, identifying 19 validated vulnerabilities, each scored with CVSS v3.1 and mapped to CWE.
  • Manually validated all 18 automated scanner findings, confirming 11 and rejecting 7 as non-actionable or unconfirmed; identified 8 additional vulnerabilities, including 5 of the 7 High-severity issues, that no scanner reported.
  • Achieved SYSTEM-level compromise via MS17-010 (EternalBlue) and extracted the full local credential database, demonstrating real-world impact beyond scanner output.
  • Delivered a 97-page report with executive summary, business impact analysis and a prioritised remediation roadmap; retested all 19 findings: 6 resolved, 4 partially resolved, 9 unresolved.
  • PTES
  • OWASP WSTG v4.2
  • CVSS v3.1
  • CWE
  • Burp Suite
  • Nessus
  • Metasploit
  • Nmap
  • Windows

featured project · b.tech major project

ProofScan: A Web Scanner That Proves Its Findings

Detects SQL injection and XSS, then runs an active test on every candidate. Only what it can prove reaches the report.

Live demo Repository

scope Deliberately vulnerable targets (DVWA and a self-built lab app) on my own machine · the live demo only replays saved scans.

  • 0.50Precision, unverified
  • 1.00Precision, verified
  • 0.86OWASP ZAP precision
  • 4/4Runs identical
  • Built a two-stage scanner in Python: stage 1 flags anything suspicious, stage 2 proves it with true/false and time-based SQL tests and script execution in headless Chromium.
  • Benchmarked against OWASP ZAP on DVWA: verification raised precision from 0.50 to 1.00 with no loss of recall (ZAP 0.86), with identical results across 4 independent runs.
  • Rejected a reflected XSS that ZAP rated High risk: the page's Content-Security-Policy stopped the script, which only running it in a real browser could show.
  • Every finding is saved with its evidence (requests, timings, browser screenshots), scored with CVSS v3.1 and CWE, and exported as a PDF report; 185 automated tests.
  • Python
  • Playwright
  • Flask
  • SQLite
  • Docker
  • OWASP ZAP
  • CVSS v3.1
  • CWE

// open-source tooling

ARP Spoofer

Python MITM tool · Scapy

  • ARP cache-poisoning tool performing a man-in-the-middle attack between a target host and gateway by forging Layer-2 Ethernet/ARP frames with Scapy.
  • Resolves MAC addresses once to prevent ARP cache flapping and automatically restores original ARP tables on exit for clean, non-disruptive teardown.
  • Tested in an isolated VMware lab (Kali attacker, Windows 10 target); documented detection and defences: Dynamic ARP Inspection, static ARP entries, arpwatch.
  • Python
  • Scapy
  • Layer 2
  • MITM
github.com/Abulkalam1524/arp-spoofer

Network Scanner

ARP-based host discovery · Python, Scapy

  • Lightweight ARP-based scanner that discovers live hosts across a /24 subnet and maps their IP and MAC addresses using Scapy srp(), with no external scanners.
  • Python
  • Scapy
  • Recon
github.com/Abulkalam1524/network-scanner

MAC Address Changer

Linux network utility · Python

  • Linux MAC-spoofing tool that changes and verifies a network interface's MAC address, including root-privilege checks and post-change validation.
  • Python
  • Linux
  • Networking
github.com/Abulkalam1524/mac-address-changer

history | grep ctf

05

CTF & Hands-on Labs

~/ctf

TryHackMe

Top 2% global

AIR 12All India Rank · October 2024 Wall of Fame

Penetration testing, web exploitation, privilege escalation and network security rooms. Completed the Jr Penetration Tester, Cyber Security 101 and Complete Beginner paths.

tryhackme.com/p/G00dM4nGr1t

D3 Fest 2025 CTF

3rd place

IIIT Bhubaneswar · November 2025

Competed as Team 7h3_UnKnw0n, placing third in the capture-the-flag competition.

Hack The Box

Ongoing hands-on machine and challenge practice, plus collaborative vulnerability research and guided lab sessions run for the KIIT cyber security society.

Competition circuit

Competed in the following CTF events:

  • BSides
  • DEADFACE
  • Pentathon
  • H7CTF

tail -f writeups.log

06

Security Write-ups

~/writeups

Hack The BoxLinux · Easy-Medium · retired machine

/ latest

Reactor: When a Website With Nothing to Click Still Gets You Root

A Next.js dashboard with no login, no forms and no links. With no attack surface in the app, the framework underneath became the way in: a React Flight deserialization bug for code execution, MD5 hashes in SQLite and a reused password for SSH, then a Node.js debugger left running as root. Ends with a defender's section and a networking gotcha that stalls tools for no obvious reason.

  1. reconnmap: 22 ssh, 3000 next.js
  2. footholdReact Flight deserialization to RCE
  3. lootMD5 hashes in SQLite
  4. lateralpassword reuse, SSH as engineer
  5. rootnode --inspect running as root
  • Next.js
  • React Server Components
  • Deserialization
  • Hash cracking
  • Privilege escalation

TryHackMePenetration testing write-up

Mr. Robot: Walkthrough

Walkthrough of the Mr. Robot room: enumeration, web exploitation and privilege escalation, written up step by step.

  • Enumeration
  • Web exploitation
  • Privilege escalation

cat /var/log/career

07

Experience & Education

~/experience

  1. Cyber Security Mentor

    Aug 2024 - Present

    IoT Lab (Cyber Security Society), KIIT

    • Mentor and train 20-25 students in the college cyber security society, delivering hands-on sessions on network security, penetration testing and CTF techniques.
    • Design and host OSINT-based CTF challenges for lab events, building challenges across recon, research and web exploitation.
    • Lead collaborative vulnerability research and guided practice labs on TryHackMe and Hack The Box.

  2. Cybersecurity Intern

    Nov 2024 - Dec 2024

    The Red Users

    • Conducted network penetration testing across assigned targets to identify vulnerabilities and assess overall security posture.
    • Used Burp Suite to intercept, analyse and modify HTTP/S requests, surfacing injection and authentication flaws in web applications.
    • Documented findings with actionable remediation recommendations in structured security reports.

  3. B.Tech, Electronics & Computer Science Engineering

    Jul 2023 - Jul 2027

    KIIT, Bhubaneswar

    Relevant coursework Computer Networks · Operating Systems · Network Security · Cybersecurity Fundamentals · Cryptography

grep -r "rank" ~/

08

Achievements & Recognition

~/achievements
National level · Government of India July 2026

OS Bug Bounty Challenge 2026 / C-DAC, MeitY

C-DAC Kolkata · Ministry of Electronics & Information Technology

A 36-hour security assessment of BOSS OS covering static and dynamic analysis, fuzzing, reverse engineering, proof-of-concept development and CVSS-scored vulnerability reporting under a defined Rules of Engagement.

  • Static analysis
  • Dynamic analysis
  • Fuzzing
  • Reverse engineering
  • PoC development
  • CVSS reporting
3rd place

Capture The Flag, D3 Fest 2025

IIIT Bhubaneswar · November 2025 · Team 7h3_UnKnw0n

Top 2% global

TryHackMe, All India Rank 12

October 2024 Wall of Fame · pentesting, web exploitation, privilege escalation, network security

Competitor

CTF competition circuit

BSides · DEADFACE · Pentathon · H7CTF

nc -lvnp 443

09

Let's connect

~/contact

I'm open to VAPT and penetration testing roles, internship or full-time. If you want the full 97-page report or a walkthrough of how I ran the engagement, send a message.

email abul.kalam.azad.cyber@gmail.com
based in Bhubaneswar, Odisha, IN open to work
résumé Download PDF
azad@sec: ~/contact / new message

Drop a line

replies from abul.kalam.azad.cyber@gmail.com

nothing is sent from this page. it opens your own mail app with the message filled in.