Hi, Iām Omiru Ranshan š½
Cybersecurity undergraduate and Linux power user specializing in offensive security research, penetration testing, network defense, and hardened system engineering.
Core Disciplines
Security Specializations
Specialized offensive and defensive disciplines honed through intensive laboratory practice, CTFs, and system hardening.
-
Penetration Testing
Proactive vulnerability assessments across web applications, APIs, and networks using industry methodologies and standard tools.
-
Linux Systems & Hardening
Deep proficiency in Kali Linux, BlackArch, Arch Linux, system chrooting, SELinux, permissions, and shell scripting.
-
Ethical Hacking & Labs
Exploitation research, OWASP Top 10 auditing, password security simulations, and hands-on capture the flag challenges.
-
AI & Security Automation
Leveraging Python, Scikit-learn, and machine learning models for anomaly detection and automated security pipelines.
Biography
Passionate About Defending & Hardening Digital Frontiers
I am Omiru Ranshan (handle: XEON š½), a cybersecurity undergraduate, penetration tester, and ardent Linux enthusiast based in Chilaw, Sri Lanka.
My everyday workflow revolves around Kali Linux, BlackArch, and Arch terminal environments, dissecting network packets, automating vulnerability checks with Python, and engineering secure application frameworks. When not hunting bugs, I explore data science and AI applications in threat detection.
Arsenal & Competencies
Security Tools & Technical Skills
The offensive and defensive arsenal I wield daily for vulnerability research, networking, exploitation testing, and automation.
-
Kali Linux -
Nmap -
Metasploit -
Wireshark -
Burp Suite -
Python -
Docker -
Git / GitHub -
Linux Kernel -
TensorFlow
Offensive & Defensive Security
-
Linux Security & Kali Administration 88%
-
Network Defense & Packet Analysis 85%
-
Web Application Penetration Testing 80%
-
SIEM & SOC Alert Monitoring (Splunk) 75%
Engineering & Professional
-
Analytical Problem Solving & Triage 95%
-
Python & Bash Script Automation 86%
-
Secure Architecture & API Hardening 82%
-
Incident Response & Digital Forensics 78%
Academic & Professional Credentials
Education & Certifications
Formal cybersecurity degree coursework, international credentials, and ongoing certifications.
-
Higher National Diploma in Cybersecurity
NEBULA Institute of Technology
-
Professional Certificate in Data Science
Harvard University (HarvardX)
Real-world Implementations
Featured Security Projects
Hands-on tools, vulnerability scanners, and automated defense systems developed to solve modern cybersecurity challenges.
Web Vulnerability Scanner
Automated Python CLI tool designed to probe web targets for common vulnerabilities including Cross-Site Scripting (XSS), SQL Injection, and insecure headers.
Network Scanner & Subnet Mapper
Multi-threaded network reconnaissance tool capable of subnet discovery, TCP/UDP port mapping, OS fingerprinting, and service banner grabbing.
AI Network Anomaly Detector
Machine learning model trained on network packet telemetry to classify abnormal traffic patterns, port sweep scans, and distributed attacks.
Malware Analysis & Forensics Lab
Isolated hypervisor environment configured with Volatility, Ghidra, and Wireshark for static and dynamic analysis of suspicious binaries and memory dumps.
Secure Authentication & RBAC
High-security authentication gateway featuring encrypted JWT tokens, rate limiting, brute-force throttling, and role-based access control.
Linux Hardening Automation
Automated Bash audit scripts implementing CIS Benchmark standards, configuring UFW firewalls, SSH key enforcement, and permission audits.
What I Provide
Security & Technical Services
Professional cybersecurity assessments, penetration testing, and hardened infrastructure deployment.
Vulnerability Assessments
Systematic scanning and manual testing of web applications and endpoints to identify vulnerabilities before adversaries do.
Penetration Testing
Simulating real-world attack vectors against networks and web apps to evaluate defensive resilience and remediation strategies.
Linux Server Hardening
Fortifying Linux servers with kernel parameter tuning, fail2ban, SSH key policies, automated backups, and firewall configurations.
Secure Software Architecture
Auditing codebases for OWASP Top 10 risks, secure token handling, password hashing algorithms, and sanitization protocols.
Field Research & Practice
CTF Labs & Case Studies
Detailed technical write-ups and threat triage case studies documenting hands-on capture-the-flag solutions.
Bypassing Authentication via SQL Injection in Custom PHP Endpoints
SOC Alert Triage: Detecting Distributed SSH Brute-Force in Splunk
REST API Hardening: Mitigating Broken Object Level Authorization (BOLA)
Latest Cybersecurity Updates
Cybersecurity News & Events
