Assessment report
Subject: Suraj Shaw
2019first live pentest
2LCSP grades passed
4security tools on GitHub
2certs in progress
Findings
| ID | Item | Evidence | Status |
|---|---|---|---|
| SS-01 | Lucideus Certified Security ProfessionalGrades 1 and 2, Safe Security | Web, wireless, network and mobile security, reverse engineering, VAPT | VERIFIED 2019 |
| SS-02 | Security internshipSafe Security, New Delhi | Assessed real websites and servers, found vulnerabilities and learned to fix them. LCSP Level 1 in May, Grade 2 in December. | DONE 2019 |
| SS-03 | ModSecurity WAFBash installer and reverse proxy | Blocked SQL injection against DVWA in a three machine lab. Code | SHIPPED |
| SS-04 | ctfBlahBlahRecon automation | Chains Nmap, Dirb and WPScan into a single run. Code | SHIPPED |
| SS-05 | nuntiusPhishing awareness | Shows how easy sender spoofing is without SPF, DKIM and DMARC. Revived in 2024 with tunnelling support. Code | SHIPPED |
| SS-06 | VerumVeilHide in plain sight | Python encryption experiments: an AI sentence cipher that turns a message into an unrelated English sentence, an emoji cipher, and SkipCode, which hides words inside natural text. Code | SHIPPED 2024 |
| SS-07 | World Chaos Map security reviewProduction app | Full security review shipped with v3.1, October 2026 | SHIPPED |
| SS-08 | Infosecurity Europe 2023ExCeL London | Three days of talks plus Hack The Box challenges at Geek Street | ATTENDED |
| SS-09 | The Move to Mobile: Digital Access RevolutionSecurity Matters CPD | Mobile access and digital identity | DONE 2026 |
| SS-10 | The Security Event 2026NEC Birmingham | Invited as a VIP guest, April 2026 | INVITED |
| SS-11 | Certified Ethical HackerEC-Council | Working toward it | IN PROGRESS |
| SS-12 | OSCPOffSec | Working toward it | IN PROGRESS |
Tooling observed
Kali Linux, Burp Suite, Nmap, WPScan, Dirb, Wireshark, ModSecurity, Python and Bash.
Remediation. None required.
Recommendation. Interview. Download the tech CV.