▍

I break systems so we can build them safer.

Web/App security, offensive research, infrastructure hardening, and clear remediation for real-world impact — from recon to a report a dev team can actually act on.

Portrait of Manjil Aayam Maharjan

Kathmandu, Nepal // status: available

cat about.md

About me

I'm a cybersecurity researcher focused on VAPT, secure engineering, and network infrastructure. While I work across web application security and ethical hacking, I'm mostly drawn to networking — configuring, managing, and securing network devices to keep communication reliable and safe.

Web · API

AppSec focus

CTFs

Labs & write-ups

Packet Tracer

Three-tier architecture

VLANs

Routing & segmentation

I cover the full lifecycle: recon → threat modeling → exploitation → post-exploitation → reporting & fixes. Expect reproducible PoCs, risk-driven impact, and pragmatic remediation plans that reflect engineering realities. My networking passion includes configuring routers, switches, VLANs, and security rules to build infrastructure that holds up under pressure.

the pipeline, every engagement

01

Recon

Map the attack surface

02

Threat model

Rank what actually matters

03

Exploit

Prove impact, not theory

04

Post-exploit

Trace the blast radius

05

Report

Fixes a dev team can ship

ls ./skills

Skills

core security

  • ›Web & API security (OWASP Top 10, business logic)
  • ›Network security & Linux priv-esc
  • ›Threat modeling & risk analysis
  • ›Secure SDLC & security code review

tooling

Burp Suite Nmap FFUF / dirb sqlmap Metasploit John / Hashcat LinPEAS / WinPEAS Gobuster Wireshark Python Cisco Packet Tracer

methodologies

  • ›OWASP Testing Guide / ASVS
  • ›PTES
  • ›Reporting: CVSS v3.1, exploit chains, remediation

git log --projects

Projects

A selection of my work from GitHub.

Networking Configurations

Practical networking setups using Cisco Packet Tracer, including VLANs and routing.

Secure Chat System

A Python-based secure chat system implementing basic encryption for privacy.

IP Tracker

Python tool that fetches detailed information about any public IP address.

File Extension Changer

Python script to change the extension/type of any file as required.

Cyber Book Store

A PHP-based online bookstore developed as coursework with basic CRUD functionality.

Full Stack Practice Website

Full-stack practice project using ReactJS, PHP, and HTML/CSS/JavaScript.

systemctl status experience

Experience

STATUS: ACTIVELY EMPLOYED

L1 Associate Expert

Jul 2026 – Present

Vianet Communications · Full-time

Continued on full-time after the internship, taking on L1 support and operational work with a security-conscious approach to networking and infrastructure.

L1 Associate Expert

Mar 2026 – May 2026

Vianet Communications · Internship

First hands-on exposure to L1 operations — network troubleshooting, support workflows, and day-to-day infrastructure work, which led to the full-time offer.

locale -a

Languages I speak

Nepali

Native / fluent

English

Professional

Hindi

Conversational

cat education.log

Education

BSc (Hons) — Ethical Hacking & Cybersecurity

2023 – Present

Softwarica College of IT & E-commerce

Focus: VAPT, networking, secure development, malware basics.

history | grep engagements

Engagements & activities

Capture The Flag (CTFs)

  • ›Hack The Box / TryHackMe labs and tournaments.
  • ›Write-ups: command injection, JWT bypass, CORS abuses.

Talks / contributions

  • ›Workshop: "Web App Attack Chains" (student club).
  • ›Open-source scripts for PortSwigger lab automation.

whois --social

Social media

./send_message.sh

Contact

Kathmandu, Nepal · Available for projects, internships, and collaborations.