03 · SECURITY

03. OFFENSIVE SECURITY & VAPT CASE STUDIES

SECURITY OPERATIONS

Hands-on security assessments, penetration testing labs and offensive-security practice.

DATE-ORDERED TIMELINE · NEWEST BUILDS FIRST
Explore Build Lab Projects
SECURITY OP 01ApexPlanet Project 06 · Windows VAPT
September 2026

Windows Server 2025 Payload-Based Intrusion & Post-Exploitation Assessment

Kali Linux → Windows Server 2025 · Isolated Virtual Lab

Independently planned and executed a complete penetration testing engagement against a Windows Server 2025 target within an isolated lab environment, delivering a custom reverse-TCP payload, capturing an Administrator session, and conducting post-exploitation host enumeration.

Engagement Milestones & Activities:

Custom Windows reverse-TCP payload generated using msfvenom • Payload delivery and live callback capture via Metasploit multi/handler • Immediate Administrator-level shell access on first execution (no priv-esc needed) • Post-exploitation enumeration: token privileges (whoami /priv) & host fingerprinting • Local account discovery, services mapping, and network connection auditing • Professional VAPT report compilation with severity-rated findings & hardening roadmap

This penetration testing engagement was executed exclusively within a controlled, isolated virtual lab environment as part of the ApexPlanet Software Pvt Ltd internship curriculum.
TOOLS & TECHNOLOGY:

Kali Linux • Windows Server 2025 • msfvenom • Metasploit Framework • multi/handler • Meterpreter • PowerShell • VAPT Reporting

View ReportView GitHub
SECURITY OP 02CVE-2011-2523 Lab
September 2026

vsFTPd 2.3.4 Backdoor Exploitation — CVE-2011-2523

Kali Linux → Metasploitable2 · Private VMware lab network

Performed a controlled exploitation exercise against vsFTPd 2.3.4 in an isolated virtual lab environment.

Lab Activities Performed:

Service identification • Version enumeration • CVE identification • Metasploit exploitation • Meterpreter session • Post-exploitation enumeration • Password hash extraction • John the Ripper password cracking

This exercise was performed exclusively in a controlled, isolated lab environment and not against production systems.
TOOLS & TECHNOLOGY:

Kali Linux • Nmap • Metasploit • Meterpreter • Metasploitable2 • John the Ripper • VMware

View ReportView GitHub
SECURITY OP 03Web VAPT Lab
September 2026

DVWA Web Application Penetration Testing & Security Assessment

Kali Linux + Burp Suite + DVWA

Performed a controlled web application security assessment against Damn Vulnerable Web Application (DVWA), focusing on identifying and understanding common web vulnerabilities.

Vulnerabilities Assessed:

SQL Injection • Blind SQL Injection • OS Command Injection • Reflected XSS • CSRF • Insecure CAPTCHA • Weak Authentication • Brute-Force Testing

TOOLS & TECHNOLOGY:

Kali Linux • Burp Suite Professional • DVWA • Metasploitable2

View ReportView GitHub
PREVIOUS PAGE · 02SKILLS
NEXT PAGE · 04PROJECTS