File Upload Vulnerabilities — A Complete Step‑by‑Step Guide
The article briefly explains how insecure file upload features can be abused by attackers and highlights common file upload vulnerabilities and their security risks.
Read on Medium
Cybersecurity
About Me
My Projects
Gallery Café
Cafe Web Site – Web Application Project
A dynamic, database-driven website built for The Gallery Café in Colombo as part of the Web Application Development module at ICBT. The system enhances customer interaction with features like table reservations, pre-ordering, menu filters, and user/admin management.
- Register
- Login
- Online table reservations
- Pre-ordering system
- Menu browsing with filters
Doggie Delights
DogFood App – Mobile App Project
An e-commerce Android app for dog owners to shop and learn about dog nutrition. Built for the Mobile App Development module (CSE5011) at ICBT, it features product listings, a cart system, educational content, and user authentication.
- Register
- Login
- Printed Catalog
- Shopping Cart
- Educational Content
DonorLink
Blood Donation System Website – Web Application Project
A web-based platform connecting blood donors, recipients, and hospitals. Developed as a group project for the Year 1 Semester 2 Internet and Web Technologies module at SLIIT. Features include appointment scheduling and an admin dashboard for managing donors and blood drives.
- Register
- Login
- Book Appointments
- View Donation History
- Admin: Approve/Decline blood drives
- Manage Donor Data
Zero Trust Architecture
Comprehensive research paper on Zero Trust Architecture exploring core principles, benefits, challenges, and future trends in cybersecurity.
- Abstract
- Evolution Of The Topic
- Core Principles of Zero Trust Architecture
- Impact Of Zero Trust Architecture
- Benefits of Zero Trust Architecture
- Challenge and Limitation of Zero Trust Architecture
- Future Developments In This Area
Linux System Administration
A hands-on project for the IE2012: Systems and Network Programming module at SLIIT. Covered Linux VM setup, network services (DHCP, DNS, NTP), server deployments (Apache, Postfix), firewall rules, secure SSH, and GDB-based debugging.
- Basic of Linux Environments
- DHCP, DNS and NTP Services
- Security and Other Services
- Linux GDB
Personal Portfolio
This portfolio was built using HTML5, CSS3, and JavaScript, and is hosted on GitHub Pages for reliable and fast deployment. I designed the layout with a focus on clarity, responsiveness, and a minimalist aesthetic, ensuring a smooth browsing experience across devices.
- Home Section
- About Section
- Project Showcase
- Certification Showcase
- Atricles Showcase
- Contact Section
- GitHub Integration
- Skills & Tools Section
- Resume Download Option
Bug Bounty Project
Completed a hands-on web security project assessing Deribit.com, applying ethical hacking techniques including reconnaissance, vulnerability scanning, and manual testing to identify and document security vulnerabilities.
- Performed reconnaissance using Sublist3r, Httprobe, and Nmap.
- onducted vulnerability scans with Nikto, Nuclei, and OWASP ZAP.
- Identified critical vulnerabilities including IP disclosure.
- Validated findings manually and tested SQL injection with SQLmap.
Certifications & Badges
Advent of Cyber 2025
TryHackMe
Proven understanding of cyber security fundamentals. Has shown consistency, tenacity & continuous learning.
Certified Cybersecurity Educator Professional
Red Team Leaders
A certification verifying expertise in cybersecurity instruction and effective training methodologies.
Introduction to Bug Bounty
Red Team Leaders
This certificate shows the person finished a beginner's course on bug bounty hunting and learned the basics of finding and reporting security flaws.
Ethical Hacker
Cisco Networking Academy
Learn the art of offensive security to uncover cyber threats and vulnerabilities before the cybercriminals do.
Python for Beginners
University of Moratuwa
This certificate confirms completion of a beginner Python programming course from the University of Moratuwa.
Exploring Networking with Cisco Packet Tracer
Cisco Networking Academy
Practice using Cisco Packet Tracer to set up, manage, and monitor a branch office network.
Introduction to the Threat Landscape 3.0
Fortinet
The Introduction to the Threat Landscape 3.0 badge recognizes a fundamental understanding of the cyber threat landscape.
Getting Started with Cisco Packet Tracer
Cisco Networking Academy
Your on-ramp to Cisco Packet Tracer. Get familiar with the simulation environment and download the latest version.
AI for Beginners
HP LIFE
By completing this course, the above-named student has gained a basic understanding of the impact of artificial intelligence (AI) on the technological landscape.
Introduction to Cybersecurity
Cisco Networking Academy
Explore the exciting field of cybersecurity and why cybersecurity is a future-proof career.
Latest Articles
Natas Wargame Walkthrough (Level 1–10)
This walkthrough covers Natas Levels 1–10, highlighting fundamental server-side web security flaws and teaching practical techniques for identifying and exploiting insecure web application logic.
Read on Medium
Bandit Game Walkthrough (Level 01–15)
This walkthrough explores OverTheWire’s Bandit wargame (Levels 0–15), highlighting practical Linux commands and techniques commonly used in ethical hacking and cybersecurity.
Read on Medium