GOWTHAM RAJ

WAF TEAM :

• Worked in Web application firewall team in F5 Networks for the past two years. As a part of this wonderful team,we design and develop robust solutions to meet client requirements for functionality, scalability and performance.
• Working with the product F5 BIG IP which possess several modules such as Local Traffic Management(LTM) which act as load balancer,Application Security Management(ASM) for traffic management and so on. I am working on ASM and LTM modules and implemented several traffic management activities such as working with virtual servers,pools,application security policies,URLS,content profiles and so on.
• Perform lot of manual testing for rest applications using POSTMAN tools,CURL command and selenium tool. Validating the HTTP request and response.
• Able to write the testcases covering all scenarios including corner cases for the product behaviour.
• Having good experience in robot automation and able to write the testcases in robot script also. In my career I wrote and automated lot of robot scripts. Analysing the results of the scripts and verifying the product behaviour.
• Work on the security solution of lot of API vulnerablities such as Client Side Request forgery(CSRF),Server Side Request Forgery(SSRF),Attack signatures,Brute force Detection and so on.
• Using juice shop to simulate the OWASP top 10 vulnerabilities.

Mini Project:

• Created a web application using flask. First implemented the application in a classical way with plain html,plain css and plain JS.
• Second created the same application with Asynchoronus Javascript and XML(AJAX) technology using xml http request. One good example for this technology is cricbuzz web application.
• Third created the same application using REST API endpoints.
• Fourth created the same web application using restful endpoints.
• Calculate and compare the response time,requests and responses in four different scenarios to determine which method is efficient.

• Worked as the Student Director for TECH Team.
• Developed Kurukshetra website and CEG TECH FORUM(CTF) website.
• Conducted Kurukshetra 2020 from Feb 12 2020 to Feb 16 2020 successfully.
• Mentored and guided more than 100 students worked under me.

Ethical Hacking:

Find the vulnerabilities of the web applications using Burp Suite.

Explore all the tools of the burp suite such as repeater,intruder,spider,proxy and so on.Perform several attacks.

Created a web application using NodeJS with block chain technology and perform DDOS attack.