Aspiring Ethical Hacker VAPT Kathmandu, Nepal
Anushtha
Lamichhane.
CSIT student and aspiring ethical hacker and penetration tester, working towards a career in VAPT (vulnerability assessment and penetration testing). I’m learning web application pentesting, playing CTFs and building up to bug bounty work, with a growing interest in AI security.
- Goal
- Ethical hacker & pentester
- Learning
- Web app pentesting
- Next
- Bug bounty & VDP
- Exploring
- AI security
- Studying
- BSc CSIT, Samriddhi College
$ whoami
About
I’m a CSIT student at Samriddhi College working towards becoming an ethical hacker and penetration tester. Right now I’m learning web application pentesting, practising in red teaming labs and preferring careful manual testing over automated scanning.
I play CTFs, I’m preparing to start bug bounty and VDP work, and I’m increasingly curious about AI security. I also help run CTFs, mentorship programs and cybersecurity workshops for students.
-
Learning now
Web App Pentesting
Auth logic, access control and information disclosure, tested by hand with Burp Suite.
-
Practising
CTFs
Physical and online Capture the Flag events to sharpen hands-on skills, KAVACH and Flare x SANS WiCyS so far.
-
Up next
Bug Bounty & VDP
Preparing to report real vulnerabilities through bug bounty and disclosure programs.
-
Exploring
AI Security
How AI systems can be attacked, misused and defended, where security meets AI.
$ cat experience
Experience
-
Live Hacking Event
Pentester Nepal · Office of the Prime Minister and Council of Ministers (OPMCM)
Took part in an authorized live hacking competition organized by Pentester Nepal.
-
Cybersecurity Awareness Session
Speaker · My former school
Went back to the school where I once studied and spoke to 90+ students about cybersecurity and staying safe online: a friendly “how to get started” session for anyone curious about the field.
-
College Representative
CSIT Association of Nepal
- Conducted CTFs and programs including Lakshyarambha, a one-month mentorship-based learning program across multiple domains, ending with project demonstrations.
- Strengthened project management and event coordination skills.
-
Executive Member
Samriddhi IT Club
- Conducted introductory cybersecurity programs for students.
- Developed leadership and public speaking skills.
-
Executive Member
GET Nepal
Part of an organization empowering women through travel; supported recent disaster relief operations.
$ cat flags.txt
CTFs & achievements
-
Winner
2025
Ideathon (Pitch & Giggle)
CSIT Association of Nepal
-
Runner-up
2025
Hult Prize at Samriddhi College
Sugarcane bio-based polythene
-
Top 3
2026
AI Hackathon 2026
The Startup Network · Jana Sunuwai
-
#17 · Top 20
Jul 2026
KAVACH Inter College CTF 2026
Physical CTF by Yeti Cyber Ops · Team Vespa · my first CTF
-
Participant
Aug 2026
Flare x SANS WiCyS Capture the Flag 2026
Global, fully browser-based challenge · Women in CyberSecurity (WiCyS)
$ ls projects/
Projects
-
P.01
Jana Sunuwai
An AI-powered citizen grievance platform. Citizens report issues directly to the government through a web portal, and the system automatically classifies each complaint and routes it to the relevant department.
Web platform / AI classification / Gov services
-
P.02
Sugarcane Bio-based Polythene
A social venture idea for bio-based polythene made from sugarcane, taken from ideation to the final pitch at the Hult Prize at Samriddhi College.
Social venture / Sustainability / Team of 4
- P.03
- P.04
$ ls certs/
Licenses & certifications
-
View credential
Introduction to Critical Infrastructure Protection (ICIP)
OPSWAT Academy
-
View credential
Introduction to Cybersecurity
Cisco Networking Academy
-
View credential
Getting Started with Linux Fundamentals (RH104)
Red Hat Training
-
View certificate
KAVACH CTF 2026 · Participation
Yeti Cyber Ops
$ cat skills
Skills
- Offensive
- Web App Pentesting, Vulnerability Assessment, Red Teaming Labs
- Tools
- Burp Suite, Metasploit, Wireshark, Nmap, Gobuster, ffuf, Linux
- Development
- JavaScript, Python, C/C++, PostgreSQL, HTML/CSS, React, Git
- Areas of interest
- VAPT, Bug Bounty & VDP, Vulnerability Research, Red Team Operations, CTF Competitions, AI Security, Security Writing