Suvarna Sonar

E-COMMERCE WEB APPLICATION VAPT

Developing and testing a PHP/MySQL e-commerce application for Web VAPT practice, covering OWASP Top 10 vulnerabilities, authentication, authorization, session management, and admin functionality using Burp Suite and other security testing tools. Identifying vulnerabilities and documenting security findings with remediation recommendations.

Web Application Vulnerability Assessment & Penetration Testing – DVWA

Performed VAPT on DVWA in a controlled lab environment. Analysed HTTP requests and responses using Burp Suite. Identified SQL Injection, Cross-Site Scripting (XSS), Command Injection, CSRF, File Upload, and Broken Authentication vulnerabilities. Prepared professional VAPT reports including vulnerability severity, CVSS-based risk ratings, Proof of Concept (PoC), impact analysis and remediation recommendations.

PortSwigger Web Security Academy Labs

Successfully completed multiple hands-on labs covering SQL Injection, Authentication, Access Control, and Business Logic vulnerabilities. Practiced manual exploitation techniques using Burp Suite. Prepared structured technical notes and remediation documentation.