● Available for Opportunities & Collaborations

Siddhanta
Gautam

"Securing systems. Breaking vulnerabilities. Building trust."

I'm an IT student with a deep passion for ethical hacking and cybersecurity — dedicated to turning innovative ideas into practical, secure digital solutions. My journey is fueled by curiosity, creativity, and a constant desire to learn and grow.

View Projects Contact Me Portfolio Site

🔐

Ethical Hacker

Cybersecurity

🐍

Python Dev

Scripting & Tools

📍

Nepal 🇳🇵

Available Remote

Scroll

01 // About Me

Who I Am

I am an IT student with a deep passion for web development and ethical hacking, dedicated to turning innovative ideas into practical and secure digital solutions. My journey in technology is fueled by curiosity, creativity, and a constant desire to learn and grow.

I thrive at the intersection of offense and defense in cybersecurity — understanding how attackers think to help build stronger, more resilient systems. My hands-on experience spans network monitoring, vulnerability assessment, penetration testing, and offensive security tooling.

My goal is to become a professional ethical hacker and security researcher who makes the digital world meaningfully safer — one vulnerability at a time.

Ethical Hacking Web Pentesting Bug Bounty Python Linux Networking OSINT Reverse Engineering CTF

Projects Built

10+

Tools Mastered

∞

Learning Drive

bash ~ kali linux

siddhanta@kali:~$ whoami

Cybersecurity Student & Ethical Hacker

siddhanta@kali:~$ nmap -sV target.local

Starting Nmap scan... Open: 22/ssh, 80/http, 443/https

siddhanta@kali:~$ msfconsole

[*] Metasploit Framework loaded. Ready to pwn.

msf6 > ▋

02 // Education

Academic Background

🎓

Ongoing · BCSIT

Bachelor of Computer System and Information Technology

Comprehensive IT study covering networking, programming, system security, databases, and software engineering, with an active focus on cybersecurity and ethical hacking.

🛡️

2023 — Present · Independent study

Cybersecurity Self-Learning Path

Continuous learning through labs, courses, security platforms, and hands-on tools—focusing on penetration-testing methods, exploit development, and bug-bounty methodology.

🌐

2022 — Present · Practical experience

Web Development & Security

Building and securing web applications while studying OWASP Top 10 issues including XSS, SQL injection, CSRF, authentication weaknesses, and secure coding practices.

🔬

2023 — Present · Cisco & labs

Networking & Infrastructure

Hands-on Cisco Packet Tracer practice with IPv4/IPv6 routing, subnetting, VLANs, firewalls, and ISP simulation—grounded in TCP/IP, DNS, DHCP, and routing protocols.

03 // Skills

My Arsenal

⚡ Technical Proficiency

Python Programming82%

Web Penetration Testing78%

Network Security80%

Metasploit & Exploitation72%

Linux Administration79%

OSINT & Reconnaissance70%

HTML/CSS Web Dev75%

Reverse Engineering (Basic)55%

🛠 Security Tools

🔴 Metasploit 🔍 Nmap 🕷️ Burp Suite 📡 Wireshark 💣 msfvenom 🐉 Kali Linux 🔬 Metasploitable 🌐 Cisco Packet Tracer 🧅 Tor / OSINT Tools 🐍 Python Scripts

🧠 Soft Skills

Problem Solving & Analytical Thinking
Attention to Detail in Security Audits
Critical Thinking in Threat Scenarios
Continuous Learning Mindset
Security Report Writing & Documentation
Team Collaboration & Peer Learning
Creative Approach to Vulnerability Research

🌐 Areas of Focus

Web App Security Network Pentesting Bug Bounty Hunting Social Engineering Vulnerability Research Malware Analysis

🔐ETHICAL HACKING

🐍PYTHON

🌐NETWORKING

🧅OSINT

🐧LINUX

🕷️WEB SECURITY

drag to rotate · auto-spinning

core toolkit, always orbiting · hover to pause

04 // Services

Security Services, Ethically Delivered

Practical, permission-based support for individuals and small teams. Every assessment is limited to authorized targets, agreed scope, and responsible reporting.

🛡️

Web Security Testing

Structured checks for common web risks, including authentication weaknesses, input handling, and OWASP Top 10 awareness—followed by clear remediation notes.

Authorized scope only

🌐

Network & Lab Assessments

Safe reconnaissance, service discovery, and configuration review for lab environments and approved network targets using tools such as Nmap and Wireshark.

Evidence-based reporting

🐍

Security Automation

Small Python utilities and repeatable workflows for reconnaissance, enumeration, and documentation—built to make security practice more efficient.

Learning & research

05 // Projects

What I've Built & Practiced

Ethical Hacking Labs

Completed, isolated penetration-testing labs using Metasploit against intentionally vulnerable systems. Each exercise documents the process, findings, and remediation mindset.

Payload creation with msfvenom
Metasploitable 2 & 3 exploitation
Post-exploitation and privilege escalation
Vulnerability scanning & reporting

✓ CompletedMetasploitable 2 lab

✓ CompletedMetasploitable 3 lab

MetasploitmsfvenomKali LinuxNmap

GitHub

Packet Tracer Networking Lab

Complex networking simulations using Cisco Packet Tracer. Demonstrates real-world routing configurations, ISP setups, and enterprise network design principles.

IPv4/IPv6 static & dynamic routing
Default routes and ISP simulation
VLAN segmentation and inter-VLAN routing
Firewall rules and ACL configuration

Cisco Packet TracerIPv4/IPv6Routing

GitHub

TryHackMe: Offensive Security Intro

Completed the introductory offensive security room on TryHackMe, covering basic tools and methodology of ethical hacking.

Fundamentals of penetration testing

TryHackMeOffSec

View Room

TryHackMe: OhSint

Completed the OSINT room on TryHackMe, learning open-source intelligence gathering techniques.

OSINT tools and methodologies

OSINTTryHackMe

View Room

TryHackMe: Google Dorking

Completed the Google Dorking room on TryHackMe, mastering advanced search operators for information gathering.

Google search operators for recon

Google DorkingTryHackMe

View Room

PortSwigger Web Security Labs

Hands‑on practice with Burp Suite on the official PortSwigger Web Security Academy, covering critical web vulnerabilities.

SQL Injection – extracting data and bypassing authentication
XXE (XML External Entity) – reading server files
Clickjacking – UI redressing attacks
Brute Force – password cracking with Burp Intruder

Burp SuiteSQLiXXEClickjacking

Lab Reports

06 // Certifications

Learning Milestones

🎯

eJPT (eLearnSecurity)

eLearnSecurity

Pursuing

🔐

CompTIA Security+

CompTIA

Planned

🐧

Linux Essentials

LPI / Self-Study

In Progress

🌐

Cisco Networking Basics

Cisco NetAcad

Completed

💻

Python for Security

Self-Study / Labs

Completed

🏴

CEH (Certified Ethical Hacker)

EC-Council

Future Goal

07 // Activity

Learning & Growth

🧪

Cybersecurity Labs

Hands-On Practice

Active participation in cybersecurity labs simulating real-world attack-defense environments. Practicing vulnerability exploitation, traffic analysis, and incident response procedures on controlled lab setups.

🎯

CTF Challenges

Competitive Security

Engaged in Capture The Flag-style security challenges to sharpen offensive skills — covering web exploitation, cryptography, forensics, binary exploitation, and network-based challenges.

🔬

Self-Directed Research

Independent Study

Independent deep-dives into ethical hacking, malware analysis, reverse engineering fundamentals, and vulnerability research — continuously expanding expertise beyond formal coursework.

👥

Tech Community

Collaboration & Sharing

Active collaboration with tech and security peers — sharing knowledge, discussing new attack techniques, reviewing write-ups, and contributing to a culture of open learning in the Nepali tech community.

🌍

Bug Bounty Journey

Responsible Disclosure

Exploring bug bounty programs and responsible disclosure practices. Building a methodology for systematic web application testing including reconnaissance, enumeration, and vulnerability verification.

✍️

Security Writeups

Documentation & Learning

Documenting security research findings, lab exercises, and CTF solutions. Writing clear, reproducible reports that demonstrate understanding of vulnerabilities and their remediation strategies.

08 // Scouting & Leadership

Service & Teamwork

The same values that guide service and scouting—discipline, teamwork, preparedness, and care for others—also shape how I learn and contribute in cybersecurity.

🏕️

Scouting leadership

Nepal Scouts – Troop Leader

Active member of the Nepal Scouts, serving as a Troop Leader in the HICESS Scout Troop. Coordinated team activities, led community service camps, and represented the troop in district‑level events.

🎉

Community contribution

Festival & Cultural Volunteering

Volunteered in numerous festivals and cultural programs as a troop leader, helping with event organization, crowd management, and community outreach. These experiences strengthened my teamwork, adaptability, and public speaking skills.

🤝

People first

Leadership & Mentorship

Guided junior scouts in skill development and ethical conduct. Focused on youth leadership development, teamwork drills, and promoting discipline and service — values that directly translate to professional cybersecurity collaboration.

🌱

Field experience

Community Service Camps

Organized and participated in survival training and community service camps that combined outdoor ethics with practical team‑building. These activities taught resilience, crisis management, and the importance of giving back.

09 // Contact

Let's Connect

Open to Collaborations & Opportunities

Whether you need a penetration tester, a curious security researcher, or want to collaborate on cybersecurity projects — I'm always open to meaningful conversations. Based in Nepal 🇳🇵, available globally.

✉️

info@siddhanta.name.npEmail — Best way to reach me

github.com/siddhantagautamGitHub — Code & Projects

linkedin.com/in/siddhanta-gautamLinkedIn — Professional Network

🌐

siddhanta.name.npPortfolio Website

✅ Message sent! I'll get back to you soon.

YOUR NAMEPlease enter your name.

EMAIL ADDRESSPlease enter a valid email.

SUBJECT

MESSAGEPlease enter a message.

10 // Roadmap