⟩

Certifications

certifications

Certified Ethical Hacker (CEH)

EC-Council

Issued Oct 2026 · ID ECC3729508146 · ANAB-accredited

Certified Cybersecurity Technician (CCT)

EC-Council

Certification

Claude 101 · Claude Code 101 · Intro to Claude Cowork

Anthropic

Course certificates

Training & Learning Paths

Structured training, labs and frameworks I've studied alongside the certifications above — across VAPT, network, bug bounty, SOC and AI security.

VAPT & Application Security

· 6

EC-Council CEH v13

Five phases of ethical hacking — recon to covering tracks

PortSwigger Web Security Academy

OWASP Top 10 and advanced web vulnerability classes

OWASP WSTG · ASVS

Web testing guide and verification standard behind every report

OWASP API Security Top 10

BOLA, broken auth, mass assignment and rate limits

OWASP MASTG · MASVS

Mobile app testing for Android and iOS

TCM Security Academy

Practical ethical hacking and web app pentesting

Network Pentesting & Red Team

· 5

Cisco Networking Academy

Networking, firewalls, IDS/IPS, routing and switching

Hack The Box

Machines and Active Directory attack paths

TryHackMe

Offensive paths, privilege escalation and red-team rooms

VulnHub

Offline vulnerable machines for full-chain practice

PTES · OSSTMM

Pentest execution and operational security testing methodologies

Bug Bounty

· 3

HackerOne · Bugcrowd

Hunting on public programs and writing clear reports

PentesterLab · Root-Me

Focused web exploitation exercises

OWASP Juice Shop · crAPI · DVWA

Deliberately vulnerable web and API targets

SOC, Malware & Forensics

· 5

EC-Council CCT

Network defense, incident handling and forensics fundamentals

Microsoft Learn

Security operations, Sentinel and Defender learning paths

LetsDefend · CyberDefenders · BTLO

SOC triage, DFIR and threat-hunting challenges

MITRE ATT&CK · D3FEND

Adversary techniques and defensive countermeasures

NIST SP 800-61

Incident handling lifecycle

AI & LLM Security

· 8

OWASP Top 10 for LLM Applications (2025)

Prompt injection, data leakage, insecure output, excessive agency

OWASP Top 10 for Agentic Applications

Agent hijacking, tool misuse and multi-agent risks

MITRE ATLAS

Adversary tactics and techniques against AI systems

PortSwigger Web LLM Attacks

Exploiting LLM APIs, indirect prompt injection

Lakera Gandalf · HackAPrompt

Prompt-injection and jailbreak challenges

Damn Vulnerable LLM Agent · Prompt Airlines CTF

Agent abuse and tool-calling attacks

MCP & Agentic AI Security

Tool poisoning, rug pulls, scope abuse

Anthropic Claude courses

Claude 101, Claude Code 101, Intro to Claude Cowork

AI Governance

· 3

NIST AI RMF

Govern, Map, Measure, Manage — AI risk management

ISO/IEC 42001

AI management system requirements

EU AI Act fundamentals

Risk classes and obligations for AI systems

Where I Keep Practising

16 platforms I train on every week — click any to visit.

PS

PortSwigger Academy

OWASP Top 10, advanced web classes & Web LLM attack labs

Web
TCM

TCM Security

Practical ethical hacking & web app pentesting

Offensive
HTB

Hack The Box

Machines, Pro Labs & Active Directory attack paths

Offensive
THM

TryHackMe

Offensive, SOC & malware analysis rooms

Offensive
LD

LetsDefend

SOC alert triage on a simulated SIEM

Blue team
CD

CyberDefenders

DFIR & threat hunting challenges

Blue team
H1

HackerOne

Hunting on public bug bounty programs

Bug bounty
BC

Bugcrowd

Hunting on public bug bounty programs

Bug bounty
PL

PentesterLab

Focused web exploitation exercises & badges

Web
RM

Root-Me

Web, network and cracking challenges

Web
VH

VulnHub

Offline vulnerable machines for full-chain practice

Offensive
BT

Blue Team Labs Online

Investigations, DFIR and SOC challenges

Blue team
LG

Lakera Gandalf

Prompt-injection levels against guarded LLMs

AI security
HP

HackAPrompt

Jailbreak and prompt-injection competitions

AI security
NA

Cisco NetAcad

Networking, firewalls, IDS/IPS & Packet Tracer

Learning
ML

Microsoft Learn

Security operations, Sentinel & Defender paths

Learning

Next

Resources

Guides, tips and research.

⟩

Let's Work Together

connect

VAPT engagements, SOC consulting, AI/LLM security assessments, incident response or training at Hacktr Technologies — tell me what you're protecting and I'll reply within one working day.

  1. 1. Scoping call

    30 minutes on what you need — apps, APIs, SOC, AI or training.

  2. 2. Proposal

    Clear scope, rules of engagement, timeline and price.

  3. 3. Test, report, retest

    Findings with PoC and fixes, then a free retest.

Security projects

CRIS InfoTech · Co-Founder & CTO

VAPT, SOC, AI/LLM security, forensics, incident response

contact@crisinfotech.com

Training & courses

Hacktr Technologies · Lead Trainer

Batches, corporate training, career & placement help

info@hacktrtechnologies.com

Talk to me directly

Sudhakar Reddy · LinkedIn

Speaking, collaborations, mentoring — message me on LinkedIn

Message on LinkedIn
LinkedIn GitHub Instagram Hyderabad · worldwide