Lakshan Sameera

Undergraduate

Cyber Security

Penetration Testing Simulation for Securing Organizational Systems

Conducted an in-depth penetration test and vulnerability assessment on a simulated organizational infrastructure using tools like OpenVAS, Nmap, Metasploit, and Armitage. Delivered a detailed report highlighting critical vulnerabilities, potential attack vectors, and actionable mitigation strategies. Skills include vulnerability assessment, web application testing (OWASP), and network traffic analysis

Offensive - Red Teaming

Nov 2024 - Dec 2024

https://drive.google.com/file/d/1su0VYpCo_uA5Cqt72cM-U48rPjYZEWlj/view?usp=share_link

This project involved a full-scope penetration test as part of the PUSL3132 Ethical Hacking coursework, simulating advanced cyberattacks against the internal network infrastructure of Clarke’s Ceylon Team. The objective was to simulate a real-world black-box attack, identify critical security vulnerabilities, exploit weaknesses within legal and ethical boundaries, and deliver a robust set of technical and strategic recommendations to strengthen the organization's security posture.

🎯 Project Objectives:

Vulnerability Discovery: Systematically identify technical weaknesses, insecure protocols, outdated software, and misconfigurations.
Exploit Simulation: Emulate real-world cyberattack patterns using industry-standard ethical hacking tools.
Risk Analysis: Quantify the severity of identified threats based on business impact and likelihood of exploitation.
Remediation Roadmap: Recommend a layered approach combining immediate technical fixes with long-term governance and awareness strategies.
Ethical Compliance: Ensure that all activities were conducted in strict accordance with legal, academic, and professional ethical standards.

🧪 Testing Methodology:

1. Planning and Reconnaissance

Established a controlled, legally authorized penetration testing environment with a defined scope and rules of engagement.
Gathered organizational data using WHOIS lookups, DNS interrogation, and network footprinting.
Conducted active reconnaissance using Nmap, identifying open ports, exposed services, OS versions, and potential entry points.

2. Scanning and Vulnerability Assessment

Leveraged OpenVAS to conduct an in-depth vulnerability scan across exposed systems and services.
Discovered multiple high-risk vulnerabilities, including:
- CVE-2006-349: Buffer overflow vulnerability in Microsoft SMB implementation.
- CVE-2010-1301: Remote code execution flaw in Microsoft Windows.
Identified systemic weaknesses such as outdated SMBv1 protocols, default credentials, and weak service configurations.

3. Exploitation

Used the Metasploit Framework to exploit the MS17-010 (EternalBlue) vulnerability, which enabled remote code execution and full system compromise.
Achieved privileged access through a Meterpreter session, simulating post-exploitation steps such as:
- Extracting NTLM password hashes
- Enumerating user privileges
- Establishing persistent access
Confirmed the feasibility of lateral movement and privilege escalation under real-world conditions.

4. Risk Evaluation

Prioritized identified vulnerabilities using a custom risk matrix assessing:
- Exploitability (likelihood)
- Business impact (data exposure, privilege escalation)
- System criticality (core services, domain controllers)
Classified critical threats such as remote code execution via SMB and plaintext credentials as requiring immediate attention.

5. Remediation & Recommendations

Delivered technical recommendations:
- Immediate patching of outdated systems and critical CVEs
- Disabling legacy protocols (e.g., SMBv1)
- Implementation of strong password policies and account lockout mechanisms
Proposed strategic improvements:
- Deployment of IDS/IPS solutions like Snort or Suricata for continuous traffic monitoring
- Regular vulnerability scans and penetration testing as part of security operations
- Cybersecurity awareness training for staff to address human factor vulnerabilities
- Development of a formal Incident Response Plan

🔍 Key Findings:

Exploitable EternalBlue (MS17-010) vulnerability granting full administrative access
Misconfigured SMB shares and lack of network segmentation
Weak password hygiene, including default and guessable credentials
Use of unsupported and unpatched software
Lack of visibility into unauthorized access attempts

⚔️ Challenges Overcome:

Maintained strict ethical alignment, ensuring all attacks remained within scoped boundaries
Managed tool compatibility issues and resource limitations by configuring a custom testing environment
Performed manual validation of automated scan results to reduce false positives and enhance report accuracy
Synthesized highly technical data into a structured and readable professional report for non-technical stakeholders

📈 Outcome & Impact:

Delivered a comprehensive penetration testing report that included:
- Executive summary
- Technical findings
- Proof-of-concept screenshots
- Impact analysis
- A phased remediation plan
Empowered Clarke’s Ceylon Team with actionable insights to mitigate immediate risks and build long-term resilience against evolving cyber threats.
Gained deep practical experience in real-world offensive security operations, reporting, and security consulting.

✅ Skills Demonstrated:

Advanced use of penetration testing frameworks and vulnerability scanners
Strong understanding of exploitation techniques, network protocols, and post-exploitation procedures
Proficiency in technical documentation, risk communication, and stakeholder reporting
Ability to translate findings into practical, strategic security enhancements

This project stands as a testament to my ability to perform end-to-end penetration testing engagements, apply industry best practices, and deliver high-value cybersecurity insights to strengthen enterprise networks.

Showcase Your Work, Get Noticed!

Your projects deserve the spotlight! Share your best work, inspire others, and open doors to new opportunities. Whether you're a student or a pro, this is your stage to shine.

Get visibility from recruiters & peers
Build your portfolio & personal brand
Connect with like-minded developers

Let's put your work in front of the right people!

Similar Projects

Cyber Security

PythonPowerShellC#socketOpenCVPyAutoGUIrequeststhreadingip-apiWiresharkVMwareWindows 10Kali LinuxVisual StudioGitHub

🧠 Reverse Shell – Remote Administration Tool (RAT) (Hacking Tool - Offensive Security )

🧠 Reverse Shell – Remote Administration Tool (RAT) Category : Red Team | Remote Access | Malware Simulation | Ethical Hacking Timeline : June 2024...

View Project

Cyber Security

C#.NET Framework 4.5+Visual StudioWindows APISystem.Net.MailIP Geolocation APIGitHubWindows OSmacintoshpyautoguisocket``threading``cv2``numpy`

🧠 Key Logger with Email Notifications: A Comprehensive Cybersecurity Monitoring Tool (KeyLogger - Offensive Security Tool )

🧠 Key Logger with Email Notifications: A Comprehensive Cybersecurity Monitoring Tool Category : Red Team | Offensive Security | Malware Simulation ...

View Project

Cyber Security

PowerShellWindows OSmacOS (PowerShell Core)SHA256 HashingGitHubCLI-based Scripting

🛡️ File Integrity Monitoring (FIM) System – Real-Time File Change Detection (Security Tool -Defensive )

🛡️ File Integrity Monitoring (FIM) System – Real-Time File Change Detection Category : Blue Team | System Security | Incident Detection | PowerShell...

View Project

Cyber Security

Microsoft AzureOpenVASWindows 10 ProRDPRemote RegistrySSHNVT FeedFirefoxVLCAdobe ReaderVirtual NetworksAzure MarketplaceVirtual Machines

🔍 Enhancing Security Through Vulnerability Management - (OpenVas) (Security Vulnerability Assessment - OpenVas Greenbone)

🔍 Enhancing Security Through Vulnerability Management - (OpenVas) Category : Blue Team | Vulnerability Assessment | Risk Remediation Timeline : Jun...

View Project