Rohan Deshmukh
Junior Penetration Tester
About
I am a Cyber Security professional and IoT security enthusiast, with a strong focus on ethical hacking, web penetration testing, and network security. I have hands-on experience in both offensive security and secure system design, which I actively apply in real-world projects like AURA.
I am eJPT certified (83%) and ranked in the Top 1% on TryHackMe, standing approximately Top 900 in India and Top 9000 globally out of more than 7 million users. My expertise lies in identifying vulnerabilities, understanding attacker methodologies, and building systems that are secure by design.
Alongside cybersecurity, I work extensively with IoT hardware, combining ESP32-based devices, wireless protocols, and backend servers to create secure, scalable solutions. I am particularly interested in red teaming, vulnerability assessment, bug hunting, and IoT security research.
Core Skills & Achievements:
eJPT Certified (83%)
Ethical Hacker & Web / Network Penetration Tester
Top 1% on TryHackMe (Global Rank ~9000, India ~900)
Strong knowledge of Web Security, Networking & Linux
Experience with Django backend development
IoT security using ESP32, NRF24, NFC/RFID
Aspiring Red Team Specialist
I aim to continuously improve my skills in offensive security and secure system engineering, while building impactful projects that bridge cybersecurity and IoT.
Experience
Projects
Ongoing development
Cybersecurity, Web Security, Vulnerability Scanning
CyberHawk, The Modular ML powered vulnerability scanner web app
Developed CyberHawk, a comprehensive web security platform for vulnerability scanning, penetration testing, and responsible disclosure reporting. Implemented parsers for multiple tools and a Docker-based container system to enable parallelized scanning and efficient workflow. Built modules to identify web vulnerabilities, automate exploit testing, and generate actionable security reports. Planning to integrate a machine learning pipeline for automatic vulnerability detection and to fetch missing exploits in the future. Demonstrates strong offensive security skills, practical penetration testing expertise, and capability to design scalable, advanced cybersecurity solutions. Responsible Disclosure Findings include: Identified and reported exposed phpMyAdmin configuration containing plaintext credentials on an educational domain; Discovered unsecured Kubelet /runningpods API endpoint allowing pod enumeration and internal exposure; Submitted structured vulnerability reports with mitigation guidance, following coordinated disclosure practices.
DockerMachine Learning (planned)PythonDjango
Complete
Responsible Disclousres
Cyber security
Disclosed 5 vulnerability on live host and reported the. Vulnerabilities: Exposed cloud API(/runningpods and kublets api's), sqli, exposed phpmyadmin endpoints, request smuggling,...
Burp suitekali linuxBBOT+3
Complete
AURA(automated unified attendance system)
IOT & web application(with glance of data analysis)•2025-09-30
djangosqlitehtml+10
Education
Yashoda Technical Campus, satara
08/2024 – Present
Pursuing MCA.
Yashwantrao Mohite Institute of Management, Karad
06/2021 – 06/2024
Completed BCA with an A grade and 8.80 CGPA.
YCIS, satara
07/2019 – 06/2021
Achieved 87.33% in HSC (PCMB).
Bharat Vidya mandir, satara
06/2019
Achieved 83.63% in SSC.
Skills
Offensive SecurityWeb PentestingNetwork PentestingVulnerability AssessmentExploit DevelopmentBug Bounty ResearchWiresharktcpdumpHTTPDNSARPICMPTCP/UDPXSSSQLiCSRFIDORBurp SuiteOWASP ZAPManual TestingESP32Raspberry PiPN532LoRaPythonBashPowerShellGitGitHubVulnerability ReportingTechnical DocumentationRemediation GuidesDjangoAuthenticationDatabase IntegrationRESTful API DevelopmentData AnalysisWeb DevelopmentSecurity ScriptingMySQLOptimized QueriesRelational SchemasVAPTDockerDocker ComposeContainerizationWindowsLinux (RedHat, Ubuntu, CentOS) System Hardening