$ cat whoami.txt Name : Kartik Yadav Role : Security & IT Analyst Location : Indore, India Focus : Web · API · Network VAPT Cert : CEH · CRTOM $
Certified Ethical Hacker doing web application, API and network penetration testing. I find vulnerabilities, prove them with evidence, and write the fix.
I am a Certified Ethical Hacker with hands-on experience in web application, API and network penetration testing. I practice exploitation through CTF competitions, bug bounty programs and cybersecurity labs, and I have responsibly reported real-world vulnerabilities, including SQL Injection and Cross-Site Scripting.
I work comfortably in Linux and Windows environments, from reconnaissance and enumeration to Active Directory fundamentals. I am passionate about VAPT, offensive security research and solving real-world security problems.
OWASP Top 10, authentication and access control testing, vulnerability assessment and reporting.
Reconnaissance, scanning and enumeration, service exploitation, packet analysis and privilege escalation on internal and external networks.
Active Directory attack path mapping, lateral movement and privilege escalation across Windows and Linux environments.
Reconnaissance, footprinting, vulnerability identification, exploitation and remediation guidance.
Device compliance, endpoint protection and identity management in Microsoft environments.
Played 7+ events solving web application and network exploitation challenges.
Completed 50+ penetration testing labs, deepening offensive web security skills.
Discovered and reported SQL Injection and Cross-Site Scripting vulnerabilities with full technical evidence and remediation guidance.
Penetration testing notes organized by topic: Active Directory, networking, privilege escalation and wireless pentesting.
PUBLICPractical web security notes: OWASP Top 10, injection, XSS, SSRF, authentication, JWT, access control and API security.
PUBLICWalkthroughs and notes from vulnerable VulnHub machines: enumeration, exploitation and privilege escalation.
PUBLICWordPress security notes: enumeration, vulnerable plugins and themes, and testing methodology.
Open to security analyst and penetration testing roles, collaborations and bug bounty partnerships.