TR

Tilaksingh Rana

Cybersecurity student · Aspiring Penetration Tester

Mumbai, Maharashtra, India

@cryst

0 followers

🎓 Bachelor of Engineering in Computer Science & Engineering (Cyber Security) at Thakur College of Engineering and Technology · Graduating 2027

About

Computer Science and Cyber Security student with hands-on experience in ethical hacking, vulnerability assessment, reconnaissance, and API/mobile/network security. Builds security tooling in Python, Bash, and C/C++ and has earned multiple cybersecurity certifications and CTF recognitions.

Experience

  • Cybersecurity Analyst Job Simulation
    Tata Consultancy Services
    Jun 2026 – 2026

    Applied Identity & Access Management concepts to enterprise security scenarios. Designed IAM implementation recommendations aligned with business requirements. Prepared project documentation and cybersecurity presentations. Worked with RBAC, MFA, SSO, and least-privilege principles.

  • Ethical Hacking & Cybersecurity Intern
    Netrinix Academy
    Sep 2025 – Nov 2025

    Completed a project-based internship focused on offensive security and red-team operations, performing vulnerability assessments and penetration testing across web applications and network targets. Conducted full attack lifecycle activities including reconnaissance, exploitation, and post-exploitation, applying OWASP Top 10 methodology to identify and document critical vulnerabilities.

Education

Skills

3 to 6 months 3 to 6 months A few months of practice with it.
<3 months <3 months Just getting started - under three months. This is also what shows when a level has not been set.

Tools / apps / platforms

6 to 12 months 6 to 12 months Most of a year behind them.
Forage
<3 months <3 months Just getting started - under three months. This is also what shows when a level has not been set.
FFUF Nmap HTTPx Linux Nikto Ollama SQLMap Postman Subfinder Wireshark Burp Suite Metasploit

Projects

  • CRYST Recon – Automated Reconnaissance Tool
    Bash, Python, Linux, Subfinder, HTTPX, Katana, Gau, Waybackurls, LinkFinder, FFUF

    Built an automation tool that streamlines bug bounty reconnaissance by integrating subdomain enumeration, endpoint discovery, URL harvesting, JavaScript analysis, and content fuzzing into a unified workflow.

  • AI-Based Web Vulnerability Scanner
    Python, Ollama, REST APIs, JWT Security

    Built a Python-based automated scanner to detect SQL Injection, XSS, and SSRF vulnerabilities using AI-driven payload generation and anomaly-based detection. Integrated the Ollama LLM to enable intelligent attack simulation, adaptive payload mutation, and automated vulnerability classification. Performed automated API security testing and JWT vulnerability analysis, including weak secret detection, algorithm confusion, and token tampering checks.

Courses & certifications

  • CyberPeace First Responders & Myth Busters Certification · CyberPeace Initiative (Google.org) · 2025
  • Learn Ethical Hacking From Scratch · Udemy · 2025
  • Jr. Penetration Tester Learning Path · TryHackMe · 2025
  • Cisco Certified Network Technician Career Path · Cisco Networking Academy · 2024

🏆 Achievements & awards

  • Hall of Fame — PodBanter

    Recognized for responsibly disclosing a security vulnerability.

  • 2nd Place — BSides Mumbai CTF · 2026
  • 16th Rank Globally - Black Hat USA CTF · 2025

    Powered by Bugcrowd.

  • Ranked #33 Nationwide - Pentathon CTF (Online Round) · 2025

    Conducted by NCIIPC (National Critical Information Infrastructure Protection Centre).

  • 1st Runner-Up - OWASP Zephyr CTF · 2025

    Thakur College of Engineering & Technology.

  • 5th Rank Globally - Redfox CTF · 2026

Explore the Broxer community

🤖
Online · instant AI help
Broxer