Salman Maredia

Cybersecurity-focused B.Tech Information Technology student with hands-on experience in web application security testing, vulnerability assessment, and penetration testing. Skilled in identifying Broken Access Control (IDOR/BOLA) and Clickjacking vulnerabilities through manual security testing and responsible disclosure, using tools such as Burp Suite, Nmap, and OWASP ZAP. Strong foundation in the OWASP Top 10, API security, and network reconnaissance, built through independent labs, CTFs, and real-world testing.

Seeking an entry-level opportunity as a SOC Analyst, Application Security Analyst, VAPT Analyst, or Cybersecurity Intern.

Independent Security Researcher - VCET

Web Application Security Assessment — VCET ERP

• Conducted manual security testing on the VCET ERP system using an authenticated student account.
• Identified 5 security vulnerabilities: 4 Insecure Direct Object Reference (IDOR/BOLA) issues affecting profile, library transaction, employee/faculty, and guardian resources, and 1 Clickjacking issue on the login page.
• Tested authorization controls through request interception and parameter manipulation in Burp Suite.
• Prepared a responsible disclosure report detailing technical impact, reproduction steps, and remediation recommendations, without performing any destructive actions.

B.Tech - Information Technology - Vidhyavardhini's College of Engineering and Technology (VCET), Mumbai University

HSC - R.B. Harish College

SSC - Sacred Heart High School