Aspiring Web App Penetration Tester

SATHWIK BUDDHE

+91-778******* Warangal, Telangana

*************@*****.*** GitHub LinkedIn

PROFILE

Aspiring Web Application Security Tester skilled in Web Application VAPT, OWASP Top 10, and Burp Suite with hands-on experience in authentication testing, session analysis, and web vulnerability exploitation. EDUCATION

B.Tech – Computer Science & Engineering (Networks) 2022 – 2026 Kakatiya Institute of Technology and Science, Warangal CGPA: 7.88 Relevant Coursework: Computer Networks, Advanced Computer Networks, Cryptography & Network Security, Ethical Hacking, Cyber Security & Digital Forensics, Operating Systems, Data Structures & Algorithms, Computer Organization & Architecture

TECHNICAL SKILLS

Security: Web Application VAPT, OWASP Top 10, Authentication & Access Control Testing Tools: Burp Suite, Nmap, Wireshark

Networking: TCP/IP, HTTP/HTTPS, DNS, Directory Enumeration Programming: Python, JavaScript, SQL, Bash

Platforms: Kali Linux

HANDS-ON SECURITY EXPERIENCE

PortSwigger Web Security Labs — github.com/sathwikvarmaa/PortSwigger-Lab

• Solved 100+ Web Security Academy labs, including 53 Practitioner-level labs, covering authentication, access control, injection, clickjacking, client-side, and session vulnerabilities.

• Crafted payloads and manipulated HTTP requests using Burp Suite Repeater, Intruder, and Proxy

• Documented exploitation methodology, vulnerable behavior, and remediation techniques DVWA Web Application Security Testing — github.com/sathwikvarmaa/dvwa-web-security-testing

• Practiced web exploitation, session analysis, and authentication testing using DVWA and vulnerable applications EXPERIENCE

Cyber Security Intern – NIT Tiruchirappalli Jun 2025 – Jul 2025

• Performed web application vulnerability assessments using Burp Suite and gained hands-on experience in ethical hacking methodologies

• Tested authentication, session management, access control, and OWASP Top 10 vulnerabilities

• Assisted in vulnerability validation, risk analysis, and security reporting, developing practical knowledge of penetration testing and cybersecurity assessment workflows PROJECTS

CyberSphere – Vulnerable Web Application for VAPT Practice — github.com/sathwikvarmaa/CyberSphere

• Developed an intentionally vulnerable full-stack web application for practicing Web Application VAPT using OWASP methodologies

• Identified, exploited, and documented 15+ vulnerabilities including SQLi, XSS, CSRF, IDOR, Session Fixation, and Weak Authentication

• Performed request manipulation, session analysis, authentication testing, and remediation documentation using Burp Suite Professional

CERTIFICATIONS

• OWASP Top 10 Web Security

• DVWA for Ethical Hackers

• Cybersecurity Essentials – Cisco Networking Academy

Contact this candidate