# Kulindu Kodithuwakku

> Application Security Engineer and red teamer based in Malabe, Sri Lanka. Specialises in web application penetration testing, Active Directory attacks, red team operations and vulnerability research. Also known as "Kody".

The portfolio at https://kulindu.me is a single page. This file is a plain-text summary of it.

## Contact

- Email: kulindukodithuwakku@gmail.com
- LinkedIn: https://www.linkedin.com/in/kulindu-kodithuwakku-570185220
- GitHub: https://github.com/kulindukody
- CV (PDF): https://kulindu.me/assets/Kulindu-Kodithuwakku.pdf

## Experience

- Application Security Engineer, MAS Holdings (2026 - present): web application penetration testing, remediation guidance, security best practices.
- Principal Consultant, Legion Offensive Security (2024 - present): leads full-scope red team engagements and web application penetration tests for SMEs.
- Red Team Engineer, OREL IT (2025 - 2026): penetration testing of web applications, networks and systems.
- CTF Lead, Hackathon Hub, NSBM (2025 - 2026): training sessions, workshops and internal CTF competitions.
- Freelance Cybersecurity Consultant (ongoing): bug bounty, threat emulation, web and network penetration testing.

## Certifications

- CRTO, Certified Red Team Operator (Zero Point Security, Sep 2026)
- CRTP, Certified Red Team Professional (Altered Security, Aug 2026)
- CPTS, Certified Penetration Testing Specialist (Hack The Box, May 2025)
- CWES, Certified Web Exploitation Specialist (Hack The Box, Sep 2025)
- CRTA, Certified Red Team Analyst (Cyber Warfare Labs, Jul 2025)
- eJPT, Junior Penetration Tester (INE Security, Apr 2025)
- PT1, Junior Penetration Tester (TryHackMe, Aug 2025)
- Google Cybersecurity Professional Certificate (Nov 2023)

## Hack The Box Pro Labs

- Dante: Active Directory and pivoting Pro Lab
- Intercept: Mini Pro Lab, enterprise Active Directory
- Trusted: Mini Pro Lab, enterprise Active Directory

## CTF results

- Champions: Cypher 2.0 Interuniversity CTF (2024), CICRA Cybersecurity Summit CTF (2024), HackToNight 2.0 (2025)
- Podiums: Cybersprint CTF, Battle of the Multiverse, AlgoXplorer, Medusa 1.0, CryptX, Cybershield 4.0
- Organiser: CICADA 404 CTF, CyberSprint 2.0, Sleight The Flag, SparkIT, CyberQuest, Battle of the Multiverse 2.0, CryptX 2.0

## Education

- Master of Cyber Security (Research), University of Colombo
- Bachelor of Information Technology, Major in Cybersecurity, Victoria University Melbourne (Academic Excellence Award)
- Foundation in IT, NSBM Green University (Academic Excellence Award)