Tharindu Yehan
Bandara.

Software Engineer — Open to opportunities

Actively building in web, mobile, and offensive security. Continuing open-source contributions and security research.

BSc (Hons) Software Engineering — KDU

General Sir John Kotelawala Defence University · GPA 3.7

Graduated with GPA 3.7. Final year thesis: WiFiGuardian — a Wi-Fi security assessment tool integrating LLM-based advisory with network attack simulation, helping users understand and harden their wireless networks.

Security Software Engineering Intern — VSIS

Completed industry internship at VSIS, working on real-world software engineering challenges across the stack.

Top 100 Global — HackTheBox

Ranked in the top 100 globally on HackTheBox, competing against thousands of security researchers and penetration testers worldwide. Published exploit PoC writeups across multiple machines.

IEEE Student Branch Website — KDU

Designed and developed the inaugural IEEE Student Branch website for KDU, launched at the Annual General Meeting on 07 May 2024.

Security Tools — SocialPhish, WordBreak & more

Built and released multiple open-source security tools used by researchers worldwide. SocialPhish 3.0 — a phishing awareness framework — grew organically to many GitHub stars with a global following. WordBreak, a password auditing utility, and several other offensive tools followed.

Vulnerability Research — KDU Systems

Identified and responsibly disclosed critical vulnerabilities in university infrastructure — including the internal LMS and web portal. Findings included privilege escalation flaws that allowed admin account creation. All issues were reported to the institution and subsequently patched.

Hacktoberfest 2022

Participated in Hacktoberfest 2022, earning digital badges and physical swag for open-source contributions.

University Entrance — KDU Intake 39

Enrolled at General Sir John Kotelawala Defence University to read for a BSc (Hons) in Software Engineering.

AnonOps — Operations

Joined the global AnonOps network via IRC, contributing to awareness campaigns including #OpSaveTheWorld. Became country channel operator under the alias **********@haunting.your.network — an early chapter in understanding decentralized communities and network culture.

A/L — Combined Mathematics Stream

Completed Advanced Levels in the Combined Mathematics stream, building the analytical foundation that would shape an engineering and security mindset.

Where it began

Curiosity kicked in early — pulling apart how systems work, writing bat scripts, tinkering with networks, staying up late to understand things nobody taught in class. The curiosity never stopped.