Performed a complete black-box penetration test on a corporate web application. Identified SQL Injection, Cross-Site Scripting (XSS), and Insecure Direct Object References (IDOR). Delivered a professional report with risk rating, proof of concept, and step-by-step remediation guidelines.