l
lubhesh_jogi

Lubhesh Jogi

@lubhesh_jogi

Web API Penetration Tester Manual VAPT

India
English
About me
I am Lubhesh Jogi, a cybersecurity professional specializing in manual web application and API penetration testing. I help businesses identify security weaknesses through structured and authorized security assessments. My approach focuses on understanding how an application works and manually testing security boundaries rather than relying only on automated findings.My areas of experience include: • Web application penetration testing• API security testing• VAPT• Authentication,authorization testing• Access control • Business logic testing•• Network security testing• Secure code review ... Read more

Skills

l
lubhesh_jogi
Lubhesh Jogi
Offline • 
Average response time: 1 hour

See my services

Programming & Tech
I will manually and automatic penetration testing to your website

Portfolio

Work experience

Founder & Cybersecurity Consultant

RootexLab • Full-time

Dec 2024 - Present • 1 yr 10 mos

Founded and operate RootexLab, a cybersecurity services initiative focused on application and infrastructure security. Perform authorized security assessments covering web applications, APIs, networks, and application security. Responsibilities include manual vulnerability testing, authentication and authorization assessment, access-control testing, business logic analysis, API security testing, vulnerability validation, security reporting, and remediation guidance. Also provide secure code review and Secure SDLC/application security consulting.

WsCube_Tech

Penetration Testing Intern

WsCube Tech • Full-time

Dec 2023 - Apr 2024 • 4 mos

Worked as a Penetration Testing Intern with practical exposure to web application security testing and vulnerability assessment. Performed testing related to authentication, authorization, access control, IDOR, input validation, SQL injection, XSS, CSRF, API behavior, and security misconfigurations. Used Burp Suite, Nmap, Linux-based security environments, and other security testing tools for vulnerability identification and validation. Documented findings with technical evidence, impact assessment, and remediation recommendations.