Penetration Testing
End-to-end web, API, network and host assessments, from reconnaissance to proof-of-concept and a clear remediation report.
root@shalitha:~# loading…
Shalitha Madhuwantha
I'M
I'M
root@shalitha:~# loading…
Security-focused developer, community builder and lifelong learner.
Hello! I'm Shalitha Madhuwantha, a student at Rajarata University of Sri Lanka, residing in the beautiful country of Sri Lanka. My interests include technology, cybersecurity, programming and education — all integral to my life and career.
My ICT journey began in 2020, but my fascination with electronics and robotics dates back to 2015. Over the years I've developed a deep understanding of technologies like Arduino, NodeMCU and Raspberry Pi, which laid a strong foundation for my ICT endeavours.
Exploring various ICT fields, I gained comprehensive knowledge in mobile and desktop app development, web development, server-side management, networking (CCNA level) and cybersecurity. Network security emerged as my true passion and envisioned career path.
In 2020 I created my first mod app, followed by a viral modded version of WhatsApp, showcasing my skills and innovation. You can explore my earlier works on my blog.
As a student in the Bachelor of Information and Communication Technology (Honours) program at Rajarata University, I constantly hone my skills and expand my knowledge. My involvement in projects has enriched my practical understanding and application of ICT.
The areas I work in — from finding issues to building and hardening software.
End-to-end web, API, network and host assessments, from reconnaissance to proof-of-concept and a clear remediation report.
Adversary simulation against people, processes and technology to test how well an organisation can detect and respond — not just where it is vulnerable.
Static and dynamic analysis of binaries and Windows internals to understand behaviour and find weaknesses.
Safe triage and behavioural analysis in an isolated lab, extracting indicators and writing detections.
Turning a crash into a reliable proof-of-concept: stack and heap exploitation, shellcode and mitigation bypass.
Linux server management, hardening, configuration management and containers for reproducible deployments.
Roles across community, business and IT operations.
Cybernetic Technologies (Pvt) Ltd · Full-time
August 2023 — January 2026Battaramulla South, Western Province, Sri Lanka
Secured systems, servers and web applications, ensuring reliable and safe operations.
WeBeRNeTCo · Full-time
May 2023 — PresentSri Lanka
WeBeRNeTCo is a web and software development company founded and conceptualised by me.
The Autodrome PLC · Full-time
March 2023 — June 2023Colombo, Western Province, Sri Lanka
Managed internal Microsoft server infrastructure and payment integrations during the internship.
Community and student roles — kept here as a record.
Web Developer Team Lead
IEEE Student Branch, Rajarata University of Sri Lanka
2025-02 — Present
Student Ambassador (Alpha → Beta)
Microsoft Learn Student Ambassadors
2024-07 — Present
President & Co-founder
Microsoft Club, Rajarata University of Sri Lanka
2024 — Present
Formal study and continuous, self-directed learning.
Rajarata University of Sri Lanka · Information and Communication Technology
2022 — PresentMihintale, Sri Lanka
Undergraduate degree covering programming, networking, databases, software engineering and information security.
ABE UK · Cyber/Computer Forensics and Counterterrorism
Diploma covering cyber security and ethical hacking fundamentals, awarded by ABE UK.
Self-directed study · Applied security research
2020 — PresentRemote
Continuous hands-on learning through labs, CTFs and certifications such as CNSP, CAP, AZ-900, CASA and CCNA.
I document what I find and what I learn. My research lives in two places.
Competitions, leadership and recognition.
Identified a vulnerability in Microsoft SharePoint
2026
Independent research on a core Microsoft product; reported responsibly.
Found vulnerabilities in Hutch Sri Lanka's website
2025
XSS, security misconfigurations and sensitive data exposure; reported.
Found broken access control on KodeKloud
2024
Premium course access without payment; reported responsibly.
Project Chair — “Linux to K8S: The DevOps Core”
2025
Led a full-day session at Rajarata University with IEEE RUSL SB.
Top 1% on TryHackMe
2022
Ranked in the top 1% of the platform.
Manthra CTF — Top 20
2023
Winning team captain of WeBeRNeTCo, representing RUSL.
Cub Scout Gold Medal
Karate Western Province Player
2017
Deputy Head Prefect (HMV)
2017
See my certificates and projects for concrete examples.