I am a junior application security tester with hands-on exposure to web and API security testing, focused on identifying common vulnerabilities through manual testing. I test for issues such as broken access control, IDOR (BOLA), authentication weaknesses, and basic input validation flaws, with an emphasis on understanding application behaviour rather than relying only on automated tools. I use tools like Burp Suite, Postman, Nuclei, ffuf, and Nmap in learning and controlled testing environments, and I focus on clear, honest documentation of findings. I am best suited for small to medium web applications or APIs that need an entry-level security review. I work ethically, communicate clearly, and do not overstate results.
# Skills
Web Application Security
API Security
OWASP Top 10
IDOR / Broken Access Control
Burp Suite | Postman