1/6

Vishw Bhatt

|

Offensive security specialist who finds what others miss. I run black-box penetration tests on live applications — hunting real vulnerabilities, not just checking boxes.

Vishw Bhatt
01

Experience

Cloud & Application Security Analyst

Current
Petpooja
June 2025 - Present

Running black-box penetration tests on production web applications and APIs. Performing cloud security assessments and identifying misconfigurations. Building internal security tools and automating vulnerability detection workflows.

Burp SuiteNessusAWSPythonOWASP

Cybersecurity Intern

TechD Cybersecurity Limited
Jan 2025 - Jun 2025

Conducted vulnerability assessments on client web applications, servers, and endpoints. Reviewed client network architecture and provided recommendations for improving security posture.

Burp SuiteNmapPythonOWASP ZAP
02

Education

7.4/10 CGPA

B.Tech in Cybersecurity

Parul University

2023 - 2026
Vadodara, Gujarat

Network Security specialization

Multiple conferences

7.04/10 CGPA

Diploma in I.T

L.E College

2020 - 2023
Morbi, Gujarat

College level tech quiz champion

03. Arsenal

Skills & Arsenal

Burp Suite Pro
OWASP Top 10
API Security Testing
Web App Pentesting
Manual Code Review
Authentication Bypass

Primary Toolkit

Kali LinuxBurp SuiteNessusWiresharkNmapMetasploitSQLMapOWASP ZAPNiktoHydraPythonDockerAWS CLIHashcatVolatility
04

Certifications

CAPen (Certified Application Penetration Tester)

SecOps Group

June 2026
VerifyActive

Web Red Team Analyst (Web-RTA)

CyberWarFare Labs

June 2026
VerifyActive

C3SA Premium Edition

CyberWarFare Labs

Jun 2025
VerifyActive

API Red Team Analyst (API-RTA)

CyberWarFare Labs

On-going
On-going

CEHv12 Master

Cisco Networking Academy

On-going
On-going
05. Work

Featured Projects

01

InvisiInject

A modular Python CLI tool for encoding and decoding SQL injection payloads to bypass WAF filters. Supports URL, Base64, Hex, CHAR() encoding with chaining capability. Zero external dependencies, pure Python.

PythonCLIWAF BypassSQL Injection
02

CAST (Container Security Audit Toolkit)

Automated Docker security assessment tool that inspects running containers for misconfigurations, excessive privileges, exposed secrets, and risky exposures. Generates findings aligned with CIS Docker Benchmark with risk scoring.

PythonDocker APITrivyCIS Benchmark
03

CloudSential

Cloud security posture management tool for detecting misconfigurations across cloud infrastructure. Automates security checks and generates actionable reports for cloud environments.

PythonAWS SDKCloud SecurityCSPM