Skip to content
View Utkarsh464's full-sized avatar
:octocat:
:octocat:
2 followers · 2 following

Achievements

Achievement: YOLO

Achievements

Achievement: YOLO

Block or report Utkarsh464

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Utkarsh464/README.md

UTKARSH SOLANKI

Web Application Security · Penetration Testing

TryHackMe

TryHackMe · LinkedIn · GitHub · Email

Focus

Web application security and penetration testing, built through hands-on labs and self-written tooling:

  • SQL injection — including blind SQLi
  • Access control / IDOR
  • SSRF
  • XSS
  • Path traversal
  • Offensive Python — scanners, brute-forcers, exploit helpers
  • HTTP internals, proxies, and raw sockets

Selected work

Web Security

  • PortSwigger Academy — web security lab writeups with payloads and root-cause analysis
  • HTB writeups (private) — independent enumeration and exploitation reasoning
  • TryHackMe Writeups — notes across Pre-Security, Cyber Security 101, and Jr Penetration Tester
  • labs — exploitation writeups against Metasploitable 2, DVWA, and WebGoat

Security Tooling

  • pentools — Python toolkit: port scanner, hash cracker, and a blind SQL injection extractor
  • http-proxy-lab — HTTP proxy and request parser built from raw sockets
  • dir-brute — multithreaded directory brute-forcer and crawler

Currently learning

  • DOM-based XSS and JavaScript fundamentals for web security
  • Authentication, API security, and JWT
  • Business-logic vulnerabilities
  • Hack The Box and independent target enumeration
  • Penetration-testing methodology

Looking for

Cybersecurity internships in application security and penetration testing.

Activity

Utkarsh's GitHub activity graph

Pinned Loading

  1. portswigger-academy portswigger-academy Public

    Writeups and notes from my PortSwigger Web Security Academy journey.

    1

  2. dir-brute dir-brute Public

    Directory brute-forcer and crawler built with Python — discover hidden paths from a wordlist, save live URLs, and crawl their contents.

    Python

  3. labs labs Public

    Hands-on lab writeups covering web application security, network penetration testing, and cybersecurity assessments — including DVWA, WebGoat, and more

  4. http-proxy-lab http-proxy-lab Public

    A Python HTTP parser and proxy built completely from scratch using only Python's standard library to learn networking, HTTP internals, and web security.

    Python

  5. tryhackme-writeups tryhackme-writeups Public

    Structured cybersecurity documentation from TryHackMe — 85+ rooms across Pre-Security, Cyber Security 101, and Jr Penetration Tester paths with commands, concepts, tools, and lab writeups

    1

  6. chat-server chat-server Public

    Multi-threaded TCP chat server with real-time broadcasting, username authentication, and admin controls — built with Python sockets and threading

    Python 1