Dulanjana Fernando

Hello! I'm Dulanjana, a software developer and certified Google Professional Cloud Architect with over 8 years of commercial experience designing, building, and hardening enterprise web applications and cloud-native systems. My cybersecurity path grew naturally out of engineering; I realized that the best way to build resilient production software is to understand exactly how to defend it from modern threat vectors.

I created Project Null Byte as both a personal security runbook and an educational platform to share practical technical insights. In my daily engineering workflows, I translate external penetration testing assessments into robust code-level fixes—mitigating OWASP Top 10 risks like IDOR and XSS right at the source. This blog is my space to document secure coding practices, cloud architecture paradigms, and deep-dive challenge walkthroughs.

Currently, when I am not conducting secure code reviews or managing IAM identity mappings, I am actively conquering labs across HackTheBox, TryHackMe, and the PortSwigger Web Security Academy. Here, you will find my detailed, methodology-driven walkthroughs where I break down complex exploit chains and vulnerabilities into digestible, step-by-step tutorials.

Technical Focus Areas:

• Lab Writeups & Capture The Flag (CTF): Structured, tactical walkthroughs for HackTheBox, TryHackMe, and PortSwigger Academy challenges, focusing on the *why* behind the exploit.
• Secure Code Review & Development: Enterprise architecture planning using object-oriented programming, microservices, and secure API lifecycles.
• Web Application Hardening: Implementing defense-in-depth code strategies to neutralize OWASP Top 10 vulnerabilities.
• Cloud Infrastructure Security: Designing private, zero-exposure VPC networks, IAM governance frameworks, and data protection structures.

Feel free to look around the write-ups, or connect with me directly on LinkedIn to talk about web security, cloud architectures, or breaking down tough challenge labs!