Sushma Lama

Offensive Security · Red Team

Offensive Security professional specializing in adversary simulation, penetration testing, and red team operations. Breaking systems to build stronger defenses.

OSCP CRTP eJPT PNPT

Penetration Testing

External/Internal network penetration testing, web application security assessment, and API security testing.

#Network #WebApp #API

Red Team Operations

Full-scope adversary simulation, C2 infrastructure, stealth techniques, and persistence mechanisms.

#CobaltStrike #Sliver #Mythic

Exploit Development

Custom exploit development, buffer overflows, reverse engineering, and fuzzing for zero-day discovery.

#Python #C #x86

Cloud Attacks

AWS/Azure penetration testing, cloud privilege escalation, misconfigurations, and container breakouts.

#AWS #Kubernetes #Docker

Wireless & IoT

Wi-Fi penetration testing, Bluetooth attacks, RF hacking, and IoT device security assessment.

#WiFi #BLE #RF

Detection Evasion

AV/EDR bypass techniques, obfuscation, living-off-the-land (LOLBins), and process injection.

#EDR #AMSI #LOLBins

Featured Offensive Projects

RedTeam Automation Framework

Automated C2 deployment, payload generation, and persistence mechanisms for rapid red team operations.

Python REST API Docker

Exploit-DB Contribution

Discovered and published 3 zero-day vulnerabilities in popular enterprise software.

CVE-2024-001 CVE-2024-002

Custom Payload Generator

Cross-platform payload generator with built-in obfuscation and AMSI bypass techniques.

Go C# PowerShell

Offensive Security Toolkit

Metasploit Cobalt Strike Burp Suite Nmap Wireshark Ghidra Immunity Debugger BloodHound Empire Mimikatz
Sushma_Lama_Resume.pdf Offensive Security Specialist · Updated 2026
Download Resume