Hi, I’m Hari Vignesh Maheshwaran

Web Application Security: SQL Injection & XSS Protection

Final Project / Web Security

Developed a deliberately vulnerable Flask-based web application to demonstrate SQL Injection and Cross-Site Scripting risks in a controlled local environment. The system included login functionality, role-based staff and manager dashboards, a feedback system, and an SQLite database.

Ethical penetration testing was carried out to demonstrate SQL Injection authentication bypass and unsafe feedback rendering. The application was then secured using parameterised queries, input sanitisation, safer output handling, and retesting to compare vulnerable and secure behaviour.

Tools: Python, Flask, HTML, CSS, SQLite, Kali Linux, UTM VM, Firefox, SQL Injection Testing, XSS Testing

Penetration Testing Case Study - Ruskin Investment Bank Ltd

Cyber Security / Ethical Hacking

Completed a full black-box penetration test on two Linux servers, uncovering and exploiting severe issues such as a ProFTPD 1.3.3c backdoor and reused SSH credentials to gain root access.

After exploitation, mitigation suggestions were provided based on industry best practices to reduce future security risks.

Tools: Kali Linux, Nmap, Metasploit, Hydra, Netcat, enum4linux, SSH

Digital Forensics & Malware Analysis Investigation

Digital Forensics / Malware Analysis

Carried out an end-to-end forensic investigation of a suspected Trojan infection using memory dumps and disk images. The investigation involved identifying malicious PowerShell activity, persistence mechanisms, and suspicious executable behaviour.

Timeline reconstruction and static malware analysis were used to understand how the suspected malware operated and how it affected the system.

Tools: FTK Imager, Volatility, PEStudio, Registry Explorer, Windows Event Logs, Prefetch Analysis

Digital Forensics Case Investigation

Forensics / Incident Investigation

Performed a full forensic analysis to investigate possible unauthorised data access and exfiltration. The investigation reviewed browser activity, USB artefacts, Prefetch records, Windows Event Logs, and Alternate Data Streams.

Evidence was analysed and correlated to validate suspicious user activity and identify traces of data movement.

Tools: FTK Imager, Autopsy, Hex Editor, Windows Event Logs, ADS, Prefetch Viewer

Enterprise Network Security Assessment - GÉANT Live Brief

Network Security / Infrastructure

Analysed enterprise network vulnerabilities and implemented layered security improvements including VLAN segmentation, ACLs, SNMPv3 hardening, GRE tunnel protection, IPS configuration, DHCP Snooping, and Port Security.

The project strengthened my understanding of secure network design, monitoring, segmentation, and infrastructure-level defence.

Tools: Cisco Packet Tracer, OSPF, SNMPv3, GRE, ACL, IPS, DHCP Snooping, Port Security

Corporate Network Configuration - XYZ Corporation

Networking / Cisco

Designed and deployed a scalable multi-branch network with VLANs, inter-VLAN routing, RIPv2, DHCP, NAT, Syslog server configuration, NTP, QoS, and centralised monitoring.

The project focused on practical routing, switching, network services, traffic control, and infrastructure reliability.

Tools: Cisco Routers & Switches, VLANs, RIPv2, NAT/PAT, DHCP, Syslog, NTP, QoS

Pfizer Ticketing Enhancement

Automation / Digital Support

Integrated automation into Pfizer’s internal ticketing workflow to streamline request handling and improve response time. The project supported more efficient digital support processes and reduced manual effort.

Tools: Python, API Integration, Workflow Automation

CV & Certificate Generator

Java Desktop Application

Created a Java desktop application that auto-generates formatted CVs and certificates using templates. The application helped automate repetitive document creation tasks and improved formatting consistency.

Tools: Java Swing, Java I/O, Templates