Breaching walls to build them stronger.

Kaivalya
Kulkarni.

Penetration Tester | Security Researcher

I explore how systems fail so they can be made stronger. Focused on web, network, API, Active Directory, Windows and Linux security, and Android APK testing — turning technical findings into clear, actionable improvements.

Pune, IndiaBased in
Web · Network · API · AD · Windows · Linux · APKSecurity focus
91% · eJPTCertification score
20+Penetration testing projects
⌘
SECURITY / RESEARCH
[ RECON // ENUM ][ THINK · TEST · SECURE ]SYS.STATUS: ACTIVE
01 / Profile

Curiosity meets security.

Computer Engineering graduate with hands-on experience assessing web applications, networks, and Android applications. I enjoy understanding attack surfaces, validating vulnerabilities, and communicating risk through practical remediation guidance. My practical security work also covers Active Directory, Windows and Linux environments, and Android APK assessment.

⌕

Offensive Security

Web, network and API VAPT; Active Directory, Windows and Linux security testing; Android APK assessment; reconnaissance, exploitation and privilege escalation in authorized environments.

◈

Security Assessment

Manual testing, vulnerability validation, impact analysis, and clear technical reporting with remediation recommendations.

⌁

Research & Build

Hands-on security tooling and a machine-learning IDS project focused on real-time port-scan detection.

02 / Capabilities

Technical toolkit.

A practical mix of offensive security, defensive fundamentals, security frameworks, and scripting.

⚔

Offensive Security

Web VAPTNetwork VAPTAPI Security TestingActive Directory PentestingWindows & Linux ExploitationAndroid APK TestingRecon & EnumerationPrivilege EscalationExploitationPost-Exploitation
⌘

Tools & Platforms

Burp SuiteNmapMetasploitWiresharkSQLmapGhidraSnortKali LinuxBloodHoundMobSFHydraNetExecNucleiOWASP ZAP
⛨

Defensive & Methodologies

IDSFirewallSOC MonitoringIncident ResponseOWASP Top 10MITRE ATT&CKNIST

Programming & scripting

PythonBashSQLPowerShell (Basic)
03 / Experience

Where I've worked.

June – October 2026

Penetration Tester Intern

Seckio

Performed security assessments of banking, helpdesk, and e-commerce applications, including Android APK security testing. Identified and validated vulnerabilities, then documented technical findings, impact, and remediation recommendations in VAPT reports.

July – September 2025

Ethical Hacking Virtual Intern

EduSkills & AICTE

Completed a 10-week intensive training program in vulnerability assessment and manual exploitation, building hands-on experience in cybersecurity fundamentals and ethical hacking methodologies.

2023 – Present

Independent Training & Practice

TryHackMe · Hack The Box · INE Labs · picoCTF · HackSmarter

Practiced web, network, Active Directory, Windows and Linux security assessments, and Android application testing in hands-on labs and authorized environments. Applied eJPT methodologies, exploitation tools, and structured security reporting.

04 / Selected work

Projects & builds.

Applied security engineering, network defense, and practical experimentation.

01 / Machine learningIDS

ML-Based Intrusion Detection System

Built a Python and Scapy IDS using Random Forest to detect real-time port-scanning activity. Includes flow-based traffic analysis, iptables-based automated IP blocking, and a Tkinter GUI for live monitoring and IP management.

PythonScapyRandom Forestiptables
02 / Network defenseFirewall

Firewall Protection & Secure Network Design

Designed a secure network environment with inbound and outbound firewall rules, using strict Access Control Policies to reduce unauthorized access risks.

Firewall RulesACLNetwork Security
03 / PracticeLabs

Hands-on Security Training

Practical learning through structured labs and CTF environments, covering reconnaissance, enumeration, vulnerability validation, exploitation, and reporting.

TryHackMeHack The BoxINE
05 / Recognition

Milestones & certifications.

TOP 100

TCS HackQuest Season 10

National Top 100 Ranker · 2026

TOP 200

EscalateX V2 CTF

Top 200 · 2025

VIP+

ParrotCTF

H7CTF · 2025

Certifications & learning

INE eJPT — 91%Practical Cyber Security for Cyber Security Practitioners — NPTELPEN-1 — Complete Offensive SecurityEthical Hacking & Cyber SecurityTCS Cyber Security Analyst Job Simulation — ForageDeloitte Australia Cyber Job Simulation — ForageTCS iON Career Edge
06 / Education

Academic foundation.

2021 – 2026

Bachelor of Computer Engineering

K J College of Engineering & Management Research

Savitribai Phule Pune University.

2019 – 2021

Higher Secondary Education

Deccan Education Society's Fergusson College
07 / Contact

Let's make systems safer.

Open to cybersecurity opportunities, penetration testing roles, and meaningful security conversations. Reach out by email or connect through my professional profiles.

Send an email ↗