Technical Skills, Security Practice.
A practical overview of the cybersecurity, testing, development, and freelance skills I am currently building and applying.
Security skills I actively practice
Web Application Security
Testing web applications for authentication, authorization, input validation, session, access control, and common application security issues.
Penetration Testing & VAPT
Reconnaissance, enumeration, vulnerability assessment, manual validation, evidence collection, and security reporting.
Network Security
Network reconnaissance, port and service enumeration, traffic analysis, and basic vulnerability assessment of authorized environments.
API Security
Testing REST APIs and authentication flows, authorization controls, parameters, tokens, JWT implementations, and API endpoints.
Bug Hunting & Vulnerability Research
Finding potential weaknesses through reconnaissance, attack-surface discovery, manual testing, vulnerability validation, and security research.
Digital Forensics
Building practical knowledge of forensic methodology, evidence handling, system investigation, and log analysis.
Security Reporting
Documenting findings with clear reproduction steps, technical evidence, impact, severity, CVE and CVSS research, and remediation recommendations.
Security Testing Methodology
Following a structured testing process from reconnaissance and discovery through manual validation, evidence collection, reporting, and retesting.
Security, Testing & Technical Services
Website Security Testing
Manual security testing, vulnerability assessment, validation, and clear reporting.
Network Security Testing
Network reconnaissance, port and service enumeration, and basic security assessment.
Web & API Testing
Functional and security testing of websites, web applications, and APIs.
Manual QA Testing
Test execution, bug identification, reproduction steps, and structured feedback.
Game Testing
Gameplay testing, issue discovery, reproduction, and testing feedback.
Web Development
Basic frontend development using HTML, CSS, Bootstrap, and related web technologies.
Data Entry & Typing
Accurate data entry, typing, formatting, and structured digital tasks.
Other IT Services
Flexible technical and digital tasks that match my current skills and project needs.
Finding weaknesses by understanding how applications work
What is Bug Hunting?
Bug hunting is the process of looking for security weaknesses in applications, APIs, networks, and other authorized targets. I approach it by first understanding the application, mapping its attack surface, following how data moves through the system, and then testing the areas where security controls may fail.
I use a combination of automated tools and manual testing. Automated tools help find interesting areas quickly, while manual testing helps understand whether a potential issue is actually security relevant and what impact it could have.
A structured checklist I use to keep testing systematic and avoid skipping important areas.
Tools I use during security testing and research
Reconnaissance
Web Security
Exploitation & Labs
Network & Analysis
Operating Systems
Development skills supporting my technical work
Programming
Web
Frameworks
Database
Skills I am actively developing
Advanced Web Security
API Security
Network Penetration Testing
Bug Hunting
Python for Security
Digital Forensics
C# & ASP.NET
Cloud & Virtualization Security
Have a security, testing, development, or technical project?
I'm open to suitable cybersecurity, testing, development, and freelance opportunities.