Balmani

Entry-level Penetration Tester with hands-on experience in full penetration testing. Ranked in the global Top 1% on TryHackMe (Rank #3766, 351 rooms completed, 29 badges, title: [0xF][TITAN]) demonstrating continuous hands-on practice in offensive security. Skilled in identifying OWASP Top 10 vulnerabilities (SQL Injection, XSS, CSRF, Authentication Bypass) using industry-standard tools. Passionate about offensive security, responsible disclosure, and continuous skill development.

Penetration Testing Intern at Particle14 Infotech Pvt. Ltd. (2025-06 – 2025-09)

• Conducted Vulnerability Assessment and Penetration Testing (VAPT) on web applications in controlled lab environments, identifying critical security vulnerabilities across OWASP Top 10 categories.
• Identified and documented critical-severity findings including SQL Injection, Stored XSS, and CSRF vulnerabilities, producing professional pentest reports with clear remediation recommendations.
• Performed reconnaissance and vulnerability scanning using Nmap, Nikto, and Burp Suite, reducing manual discovery time through systematic enumeration workflows.
• Executed exploitation and post-exploitation activities using Metasploit Framework, including Meterpreter payload generation via msfvenom and privilege escalation techniques.
• Delivered structured vulnerability reports with proof-of-concept (PoC) evidence, severity classifications (Critical/High/Medium/Low), and step-by-step remediation guidance.

Cyber Security Intern at Thiranex — Skill Development & Future Tech (2026-05 – 2026-06)

Certificate ID: THX-MAY1426-236 (MSME Verified)

• Built a Phishing Email Detection Model using Scikit-learn (TF-IDF + Random Forest), successfully classifying emails as phishing or safe with high accuracy.
• Developed a Secure Login System with bcrypt password hashing, input validation, SQL injection protection, session management, and Two-Factor Authentication (2FA).
• Designed and implemented a Mini Vulnerability Scanner to detect open ports, weak configurations, and generate basic vulnerability reports — reinforcing practical web application security skills.
• Applied secure coding principles throughout projects, demonstrating understanding of real-world attack surfaces and developer-side security responsibilities.

Diploma in Cloud Computing – Jetking Institute, Raipur (2025)

Bachelor of Commerce in B.Com – Mats University, Raipur (2020 – 2023)

Class XII – Shri Gujarati English Medium H.S. School, Raipur (2020)