Skip to content
View VikashChoudhary-04's full-sized avatar
4 followers · 3 following

Block or report VikashChoudhary-04

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
VikashChoudhary-04/README.md

👨‍💻 Vikash Choudhary

Web Application Penetration Testing | API Security | Security Tooling

Entry-level cybersecurity professional focused on web application penetration testing, API security, and reconnaissance automation. I build practical security tools, perform structured penetration testing simulations, and document hands-on security methodology through open-source projects.

🛠 Core Skills

  • Web Application Penetration Testing
  • API Security Testing
  • OWASP Top 10
  • Authentication & Authorization Testing
  • SQL Injection
  • Cross-Site Scripting (XSS)
  • Insecure Direct Object Reference (IDOR)
  • Vulnerability Assessment & Validation
  • Reconnaissance & Attack Surface Mapping
  • Security Reporting

⚙️ Security Tools

Web Security

Burp Suite Professional • sqlmap • ffuf • Gobuster • WhatWeb

Reconnaissance & Assessment

Nmap • Subfinder • Amass • httpx • dnsx • Nuclei • Wappalyzer

Development

Python • Git • GitHub

🧠 Pentesting Methodology

My testing workflow follows a structured process:

  1. Reconnaissance
  2. Attack Surface Mapping
  3. Input & Endpoint Discovery
  4. Vulnerability Assessment
  5. Exploitation & Validation
  6. Evidence Collection
  7. Impact Assessment
  8. Professional Reporting

📂 Featured Projects

🔍 ScopeForgeX

Automated reconnaissance and security assessment toolkit designed for structured penetration-testing workflows.

Demonstrates: security automation, reconnaissance workflow engineering, attack-surface discovery, and Python development.

🌐 Subhunt

Active subdomain-enumeration tool built in Go using DNS over HTTPS (DoH), with concurrent scanning, resolver failover, wildcard detection, and automation-friendly output.

Demonstrates: Go development, active subdomain enumeration, DNS over HTTPS, concurrency, and reconnaissance tooling.

🛡️ Burp Suite Mastery

Complete 18-module Burp Suite learning path covering web application security testing, practical workflows, professional pentesting methodology, and interview preparation.

Demonstrates: Burp Suite proficiency, web application testing methodology, practical security workflows, and structured technical documentation.

🎯 MiniCorp Red Team Simulation

Simulated end-to-end penetration test covering reconnaissance, vulnerability validation, evidence collection, impact analysis, and professional reporting.

Demonstrates: complete penetration-testing methodology, vulnerability validation, evidence collection, and professional security reporting.

🏆 Hands-On Security

  • 🥇 Achieved Top 1% on TryHackMe
  • 🧪 Practiced web application security through PortSwigger Web Security Academy
  • 🔬 Performed hands-on testing with DVWA and OWASP Juice Shop
  • 🛠️ Built open-source cybersecurity tools and documentation projects
  • 🔍 Practiced structured reconnaissance, vulnerability validation, and security reporting

📜 Relevant Certifications

  • In-depth Advanced Networking Certification - Craw Security
  • Linux Essential Training Certification - Craw Security
  • Python Certification - Craw Security
  • Ethical Hacking Certification (aka Ethical Hacking and Countermeasures Certification) - Craw Security
  • Advanced Penetration Testing Certification (aka Penetration Testing & Security Analyst Certification) - Craw Security
  • Web Penetration Testing Certification (aka Top 20 Critical Web Application Certification) - Craw Security
  • Mobile Application Security Certification - Craw Security
  • End Point Security Certification - Craw Security
  • AWS Associate Certification - Craw Security
  • AWS Security Certification - Craw Security

📫 Connect

Pinned Loading

  1. MiniCorp MiniCorp Public

    Enterprise infrastructure lab demonstrating Active Directory administration, Windows & Linux system management, and an evidence-based internal security assessment.

    1

  2. ScopeForgeX ScopeForgeX Public

    A Python-based stage-oriented cybersecurity workflow framework for reconnaissance, enumeration, vulnerability identification, structured reporting, and analyst-assisted security testing.

    Python 1

  3. Burp-Suite-Mastery Burp-Suite-Mastery Public

    A complete hands-on Burp Suite mastery guide for web application security, bug bounty hunting, and penetration testing.

    3

  4. subhunt subhunt Public

    Subdomain enumeration tool combining multiple discovery techniques for attack-surface reconnaissance.

    Go 1

  5. mitre-mapped-incident-report mitre-mapped-incident-report Public

    SOC incident investigation project demonstrating MITRE ATT&CK mapping, Splunk-based detection analysis, and professional incident reporting workflows.

    1

  6. web-attack-monitoring web-attack-monitoring Public

    Splunk-based web attack monitoring project focused on detecting suspicious HTTP activity, brute force attempts, and common web attacks using log analysis and detection engineering.

    1