Software Engineer · Ethical Hacker · Sri Lanka

Tharindu Yehan
Bandara.

BSc (Hons) in Software Engineering

scroll

Portfolio — 2026

Software Engineer
and Penetration Tester.

Building things for the web from Sri Lanka, blending full-stack development, design precision, and offensive security research. Focused on clean craft and clear intent.

2026

Present

Software Engineer / DevOps Engineer — Open to opportunities

Actively building in web, mobile, and offensive security. Continuing open-source contributions and security research.

Full-Stack DevOps Cybersecurity Open Source

GitHub → LinkedIn → Contact →

2026

Present

Instructor (Academic Staff)

Department of Computer Science
Faculty of Applied Sciences · University of Sri Jayewardenepura

Supporting teaching and academic activities within the Department of Computer Science.

Academic Staff Computer Science Higher Education

2025

Degree · Research

BSc (Hons) in Software Engineering

General Sir John Kotelawala Defence University · Second Class Upper Division

Graduated with a GPA of 3.63 / 4.00 and completed 148 academic credits (129 GPA + 19 NGPA) across 4 years of study. The final year thesis, WiFiGuardian, is a Wi-Fi security assessment tool that integrates LLM-based advisory with network attack simulation to help users understand and harden their wireless networks.

LLM Network Security PyQt6 Aircrack-ng

WiFiGuardian → KDU →

2025

Internship

Security Software Engineering Intern — VSIS

Completed industry internship at V S Information Systems, working on real-world software engineering challenges across the stack.

Internship Industry

2024

Community

IEEE Student Branch Website — KDU

Designed and developed the inaugural IEEE Student Branch website for KDU, launched at the Annual General Meeting on 07 May 2024.

IEEE Web Development Bootstrap PHP

View Project →

2023

Open Source

Security Tools — SocialPhish, WordBreak & more

Built and released multiple open-source security tools used by researchers worldwide. SocialPhish 3.0, a phishing awareness framework, grew organically to many GitHub stars and attracted a global following. WordBreak, a password auditing utility, and several other offensive tools followed.

Bash Python 130+ Stars Open Source

Tools Page → SocialPhish → WordBreak →

2023

Responsible Disclosure

Vulnerability Research — KDU Intranet

Identified and responsibly disclosed multiple vulnerabilities in university infrastructure, including the internal LMS and web portal.

Finding: Privilege escalation enabling unauthorized administrator account creation
Severity: High · estimated CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Disclosure: Reported directly to institution IT in 2023
Status: Reported as patched; exact remediation interval and independent retest were not formally recorded

Broken Access Control CVSS 8.1 Responsible Disclosure

2022

University

University Entrance — KDU Intake 39

Enrolled at General Sir John Kotelawala Defence University to read for a BSc (Hons) in Software Engineering.

KDU Engineering

KDU →

2020

Advanced Levels

A/L — Combined Mathematics Stream

Completed Advanced Levels in the Combined Mathematics stream, building the analytical foundation that would shape an engineering and security mindset.

Mathematics Physics

2015

Origin

Where it began

Curiosity kicked in early. I pulled apart how systems worked, wrote batch scripts, tinkered with networks, and stayed up late learning things nobody taught in class. That curiosity never stopped.

Self-taught Scripting Curiosity