Penetration Testing
End-to-end web, API, network and host assessments, from reconnaissance to proof-of-concept and a clear remediation report.
root@shalitha:~# loading…
Shalitha Madhuwantha
I'M
I'M
root@shalitha:~# loading…
A cybersecurity enthusiast and software developer from Sri Lanka.
Hello! I'm Shalitha Madhuwantha, a student at Rajarata University of Sri Lanka, residing in the beautiful country of Sri Lanka. My interests include technology, cybersecurity, programming and education — all integral to my life and career.
My ICT journey began in 2020, but my fascination with electronics and robotics dates back to 2015. Over the years I've developed a deep understanding of technologies like Arduino, NodeMCU and Raspberry Pi, which laid a strong foundation for my ICT endeavours.
Exploring various ICT fields, I gained comprehensive knowledge in mobile and desktop app development, web development, server-side management, networking (CCNA level) and cybersecurity. Network security emerged as my true passion and envisioned career path.
In 2020 I created my first mod app, followed by a viral modded version of WhatsApp, showcasing my skills and innovation. You can explore my earlier works on my blog.
As a student in the Bachelor of Information and Communication Technology (Honours) program at Rajarata University, I constantly hone my skills and expand my knowledge. My involvement in projects has enriched my practical understanding and application of ICT.
The areas I work in — from finding and exploiting issues to building and hardening software.
End-to-end web, API, network and host assessments, from reconnaissance to proof-of-concept and a clear remediation report.
Adversary simulation against people, processes and technology to test how well an organisation can detect and respond — not just where it is vulnerable.
Static and dynamic analysis of binaries and Windows internals to understand behaviour and find weaknesses.
Safe triage and behavioural analysis in an isolated lab, extracting indicators and writing detections.
Turning a crash into a reliable proof-of-concept: stack and heap exploitation, shellcode and mitigation bypass.
Linux server management, hardening, configuration management and containers for reproducible deployments.
Where I've worked, led and built.
Cybernetic Technologies (Pvt) Ltd · Full-time
August 2023 — January 2026Battaramulla South, Western Province, Sri Lanka
Secured systems, servers and web applications, ensuring reliable and safe operations.
WeBeRNeTCo · Full-time
May 2023 — PresentSri Lanka
WeBeRNeTCo is a web and software development company founded and conceptualised by me.
The Autodrome PLC · Full-time
March 2023 — June 2023Colombo, Western Province, Sri Lanka
Managed internal Microsoft server infrastructure and payment integrations during the internship.
Selected work — from education platforms and automation to security research tooling.
Important information and guidance for all students appearing for the university entrance exam.
A Node.js time-reminder bot that keeps students on schedule with timely lecture reminders.
A Python payload listener built for educational cybersecurity research into reverse connections.
Write-ups on security, development and lessons from building things.
System Info The server had not been rebooted, which was important because any malware that was still running could potentially leave useful evidence in memory. During the initial check, I also noticed
medium.com · September 2026
Continuous learning across cloud, networking, development and security.
Certified API Security Analyst (CASA)
APIsec University
Certified Network Security Practitioner (CNSP) — Merit Pass
The SecOps Group
React Native
Meta
Automate Cybersecurity Tasks with Python
Learn Ansible Basics — Beginners Course
KodeKloud
Shell Scripts for Beginners
KodeKloud