Web Application Security • Penetration Testing

HI, I'M

Gautam Gupta

Breaking apps, brewing coffee, and chasing vulnerabilities.

gautam@security:~$ penetration_testing

Want to know more about me?

Gautam Gupta

// About

Curiosity drives the hunt.

I'm a Computer Engineering graduate from Kantipur Engineering College building my path in cybersecurity and penetration testing. My current focus is practical web security: understanding requests, authentication flows, SQL injection, rate limits, and the logic behind vulnerabilities.

I learn by testing, documenting, and repeating — from PortSwigger labs and Burp Suite work to personal security writeups and projects.

Burp Suite SQLi Authentication Network
17PortSwigger Labs
89.77%Research Accuracy
2026B.E. Computer Engineering

// Security Work

What I test.

Focused on practical web application security and the fundamentals that turn a vulnerability into an understandable attack path.

01 / WEB

SQL Injection

Exploring UNION-based, error-based, and blind SQL injection techniques through hands-on labs and writeups.

02 / AUTH

Authentication

Username enumeration, brute-force controls, 2FA bypass scenarios, and weaknesses in authentication logic.

03 / METHOD

Recon → Exploit

Building a repeatable workflow: understand the application, intercept traffic, test assumptions, document the finding.

// Projects

Things I've built.

Software, AI, and security learning projects that show how I approach technical problems.

Web App Security Learning Portfolio

Burp Suite / PortSwigger

Completed practical labs covering SQL injection, authentication, and HTTP request manipulation; documented methodologies, observations, and recommended mitigations.

Retinal Disease Detection System

Python / Streamlit / PyTorch

Built a web-based fundus-image analysis system using an Attention U-Net segmentation stage and a Vision Transformer classification head.

Product Recommendation System

React / Firebase / Pinecone

Built an AI-powered recommendation system using vector similarity search for personalized recommendations.

International Journal on Engineering Technology (InJET), Vol. 3, No. 2, 2026

Glaucoma Research Publication

Published work on hybrid deep learning for glaucoma detection, achieving 89.77% classification accuracy on SMDG-19.

89.77%
Accuracy

// Skills

Toolkit & stack.

Web Security

SQL Injection Authentication Access Control Session Security

Web Development

MERN Stack Node.js React.js Express.js REST API JWT Authentication CSS

Programming

JavaScript Python C / C++ Bash

Databases

MongoDB MySQL Mongoose

Tools & Platforms

Burp Suite Git GitHub Postman VS Code PortSwigger Google Colab