Lakshmi Pulichari

Having four years of hands-on experience in Penetration Testing focused on API's and web applications, and backed by a robust academic foundation with a Master's degree in IT Security, I am a dedicated cybersecurity professional adept at identifying and mitigating digital threats. My expertise extends to employing a wide array of industry-standard tools and methodologies to rigorously assess the security of web applications and APIs. Through a combination of automated scanning and manual testing, I excel in uncovering vulnerabilities and weaknesses within complex systems. My proficiency includes assessing authentication mechanisms, encryption protocols, and authorization controls to ensure the confidentiality, integrity, and availability of sensitive data. I have a strong track record of working with development teams to implement secure coding practices and bolster defenses against emerging threats. As a Penetration Tester specializing in API's and web applications, and mobile applications and infrastructure testing, I am poised to contribute my expertise to enhance your organization's digital security posture.

4 years of IT experience in working & on Web application security testing (2 years), web services security testing and manual testing. API Security Testing (2 years) Vulnerability Assessment and Penetration testing.

• Cracking the Password for widgets File university of central Lancashire, During my university project, I undertook a comprehensive assessment of Computer security for a specific application, focusing on the identification of vulnerabilities and the enhancement of security measures. The project involved the use of advanced password analysis techniques, such as utilizing tools like John the Ripper, to evaluate the strength of password protection for a file named 'Widgets.' This effort was carried out with the goal of enhancing security awareness and knowledge. In addition to password analysis, I conducted both automated and manual vulnerability assessments on the application. The objective was to identify potential weaknesses and security gaps that could pose risks to the system. The outcomes of these assessments were meticulously documented, including the vulnerabilities found and recommendations for remediation. The project reinforced my understanding of security best practices and the importance of safeguarding digital assets. My academic experience in cybersecurity has equipped me with the skills and knowledge necessary to conduct ethical security assessments and contribute to the development of robust security measures in real-world scenarios.
• Machine learning model to detect Phishing URLs university of central Lancashire, During the challenging period of the COVID-19 pandemic, I spearheaded an initiative to combat the escalating threat of phishing attacks. In response, I undertook the development of a machine learning based system designed to proactively identify and mitigate phishing URLs. The project involved the systematic collection of data from reputable open-source repositories and the application of sophisticated machine learning algorithms, including Decision Trees, K-Nearest Neighbors (KNN), and Random Forest, to create an effective detection model. The machine learning model was meticulously developed and meticulously fine-tuned through a rigorous training process, utilizing salient features indicative of phishing attempts. The model underwent extensive testing and validation procedures to ensure its efficacy in accurately detecting phishing URLs while minimizing false positives. The successful deployment of this model has contributed significantly to enhancing cybersecurity resilience, particularly during the unprecedented challenges posed by the COVID-19 pandemic. This project underscores my proficiency in machine learning, data analysis, and proactive problem-solving, addressing critical cybersecurity issues during a time of heightened vulnerability. It serves as a testament to my dedication to mitigating cyber threats and safeguarding digital environments.

• Industry Standards: OWASP – Top 10
• Proxy Tools: Burpsuite, Postman, swagger.
• Web Vulnerability Scanner: OWASP ZAP, Burpsuite Professional, HCL app scan, Netsparker, Checkmarx, Qualys
• Network Security Scanner: Nmap, Nikto, Wireshark
• Extensions: Foxyproxy, Wappalyzer