VAPT & Network Security

Assessment scope

• Web & API VAPT — OWASP Top 10: SQLi, XSS, IDOR, CSRF, BOLA and privilege escalation, as documented in my projects.
• Mobile VAPT — Android testing via APK decompilation, static analysis and dynamic instrumentation.
• Active Directory — penetration testing and attack-path mapping (Kerberoasting, Pass-the-Hash) with remediation guidance.
• Network & endpoint — scanning, enumeration, infrastructure audits and CIS-aligned hardening.

Deliverables

• CVSS-scored findings, technical vulnerability reports and executive briefings.
• Remediation roadmaps and risk prioritisation.
• Exploit proof-of-concept development where engagements require it.

Named case studies: Audio Magic (web/API), Airtel Bharti (network & AD), Cerebra AI (AI SaaS platform).