Summary

Cybersecurity enthusiast, reverse engineer and software developer pursuing a BICT (Honours) at Rajarata University of Sri Lanka. Experienced across web and software development, server and network administration (CCNA-level) and security research, with certifications from EC-Council, Google, Cisco/Nextgen, Meta and KodeKloud. Founder of WeBeRNeTCo and a Microsoft Learn Student Ambassador.

Core capabilities

• Penetration Testing — End-to-end web, API, network and host assessments, from reconnaissance to proof-of-concept and a clear remediation report.
• Red Teaming — Adversary simulation against people, processes and technology to test how well an organisation can detect and respond — not just where it is vulnerable.
• Reverse Engineering — Static and dynamic analysis of binaries and Windows internals to understand behaviour and find weaknesses.
• Malware Analysis — Safe triage and behavioural analysis in an isolated lab, extracting indicators and writing detections.
• Exploit Development — Turning a crash into a reliable proof-of-concept: stack and heap exploitation, shellcode and mitigation bypass.
• Cloud & Automation — Linux server management, hardening, configuration management and containers for reproducible deployments.

Experience

• System & Security Engineer · Cybernetic Technologies (Pvt) Ltd

  2023-08 — 2026-01 · Battaramulla South, Western Province, Sri Lanka · Full-time

  Secured systems, servers and web applications, ensuring reliable and safe operations.

  • Conducted penetration testing on Node.js APIs and web applications.
  • Performed Linux server security hardening (Ubuntu & AlmaLinux).
  • Configured and managed firewalls, access controls and monitoring tools.
  • Developed automation scripts for backups, monitoring and maintenance.
  • Managed server backups, recovery and routine system administration.
  • Ran security assessments during software development and deployment.

• Founder & Owner · WeBeRNeTCo

  2023-05 — Present · Sri Lanka · Full-time

  WeBeRNeTCo is a web and software development company founded and conceptualised by me.

  • Lead web and software development projects end to end.
  • Handle client delivery, hosting, hardening and maintenance.
  • Publish technical content and tutorials for the community.

• Trainee IT Executive · The Autodrome PLC

  2023-03 — 2023-06 · Colombo, Western Province, Sri Lanka · Full-time

  Managed internal Microsoft server infrastructure and payment integrations during the internship.

  • Administered the company's Microsoft internal server environment.
  • Configured the Marks payment gateway on tourama.net and nadishka.lk.
  • Built a DBMS to manage the autodrome.lk website and its database.

Certifications

• Certified API Security Analyst (CASA) — APIsec University (September 2025)
• Certified Network Security Practitioner (CNSP) — Merit Pass — The SecOps Group (January 2025)
• React Native — Meta (May 2024)
• Automate Cybersecurity Tasks with Python — Google (April 2024)
• Learn Ansible Basics — Beginners Course — KodeKloud (April 2024)
• Shell Scripts for Beginners — KodeKloud (April 2024)
• Postman API Fundamentals Student Expert — Postman (January 2024)
• Purple Teaming Fundamentals — CWL (November 2023)
• Advanced Bash Scripting — KodeKloud (November 2023)
• NDG Linux Unhatched — Cisco (November 2023)
• Java Swing for GUI Development — Udemy (October 2023)
• Cisco Certified Network Associate (CCNA) — Nextgen (August 2023)
• Black Hat Python: Python for Pentesters — EC-Council (July 2023)
• Python and Flask Framework Complete Course — Udemy (July 2023)
• Ethical Hacking Essentials (EHE) — EC-Council (June 2023)
• Python 3 Master Course — Udemy (May 2023)
• Cybersecurity and Networking — Nextgen (March 2023)
• Python for Beginners — University of Moratuwa (April 2022)
• Certified AppSec Practitioner (CAP) — The SecOps Group ()
• Microsoft Certified: Azure Fundamentals (AZ-900) — Microsoft ()
• Junior Penetration Tester — TryHackMe ()
• Diploma in Cyber Security & Ethical Hacking — ABE UK ()

Vulnerabilities disclosed

• Microsoft SharePoint — Microsoft (Medium, Reported, 21 March 2026)
• Hutch Sri Lanka website — XSS, misconfigurations and data exposure — Hutch Sri Lanka (High, Reported, 4 September 2025)
• KodeKloud — broken access control on premium content — KodeKloud (High, Reported, 1 April 2024)

Selected projects

• Thush LK (30 April 2024) — Important information and guidance for all students appearing for the university entrance exam.
• Notify-Bot (23 November 2023) — A Node.js time-reminder bot that keeps students on schedule with timely lecture reminders.
• Weby~Pay (3 November 2023) — A Python payload listener built for educational cybersecurity research into reverse connections.
• WIFI~THIEF (14 April 2023) — A Windows-based research tool that demonstrates how stored Wi-Fi credentials can be harvested.
• Image Filter API (2 March 2023) — A versatile Python image-filtering application supporting grayscale, sepia, negative and more.
• IDM-RESET (28 December 2022) — A Java desktop utility that resets Internet Download Manager's trial period.
• Network Scripts (23 August 2022) — A collection of ARP-based network scripts for discovery and analysis, built with Scapy.

Education

• Bachelor of Information and Communication Technology (Honours) · Rajarata University of Sri Lanka

  2022 — Present · Information and Communication Technology

  Undergraduate degree covering programming, networking, databases, software engineering and information security.

• Diploma in Cyber Security & Ethical Hacking · ABE UK

  — · Cyber/Computer Forensics and Counterterrorism

  Diploma covering cyber security and ethical hacking fundamentals, awarded by ABE UK.

• Offensive security, reverse engineering & exploit development · Self-directed study

  2020 — Present · Applied security research

  Continuous hands-on learning through labs, CTFs and certifications such as CNSP, CAP, AZ-900, CASA and CCNA.