B.Tech CSE Student · Aspiring Web Application Security / VAPT Analyst
Curious about how web apps break, how vulnerabilities work, and how to test them responsibly.
Name : Anish Patra
Username : Cruzzop
Role : Cybersecurity Learner
Focus : Web Application Security | VAPT
Currently : Building fundamentals + practising in legal labs
Goal : Master Web Security / VAPT
Not claiming to be an expert — just learning, testing in authorised labs, and documenting progress one step at a time.
These are current learning areas, not claims of professional proficiency.
| Project | Status | What it will contain |
|---|---|---|
web-security-lab-notes |
PLANNED |
Training-lab write-ups, observations, impact, and remediation |
juice-shop-assessment |
PLANNED |
A scoped assessment of a local intentionally vulnerable app |
web-testing-checklist |
PLANNED |
A structured checklist based on recognised testing guidance |
I’ll add project links when the work is completed and published.
- PortSwigger Web Security Academy — free web security lessons and labs
- OverTheWire: Bandit — Linux command-line practice
- OWASP Juice Shop — intentionally vulnerable web application
- OWASP Web Security Testing Guide — testing methodology reference
- Only test systems I own or have explicit permission to assess.
- Document what I actually tested; never invent findings.
- Include clear impact and practical remediation.
- Never publish credentials, tokens, or private data.
- Keep learning and be honest about my current level.
GitHub: github.com/Cruzzop
[ session active ]
Learn · Practise · Document · Repeat