On Sunday, 9 August 2026, fourth-semester BCS students at Texas College of Management and IT spent a full day learning how attackers break into web applications and how to shut those gaps down. The Bootcamp on Web Application Penetration Testing was organised by the IT Department and led by a working cybersecurity professional.
About the Bootcamp
Web application penetration testing is the practice of attacking a website or web app on purpose with permission to find weaknesses before someone else does. It is one of the most in-demand skills in cybersecurity right now, and it is very hard to learn from a textbook alone.
That is why the IT Department built this bootcamp around hands-on work. Instead of only reading about common vulnerabilities, students walked through how a professional actually approaches a target: mapping the application, probing inputs, confirming what is exploitable, and then writing up the fix. The day ran from 9:00 AM to 4:00 PM on campus.
| Detail | Information |
|---|---|
| Event | Bootcamp on Web Application Penetration Testing |
| Date | Sunday, 9 August 2026 |
| Time | 9:00 AM – 4:00 PM |
| Participants | BCS 4th-semester students |
| Trainer | Mr. Raju Ghimire, Head of Cybersecurity, Ureka Systems Pvt. Ltd. |
| Venue | Texas College of Management and IT, Kathmandu |
| Organised by | IT Department, TCMIT |
What the Bootcamp Set Out to Do
The IT Department designed the session around four clear objectives:
- Teach BCS students how to detect, exploit, and resolve vulnerabilities in web applications.
- Show how penetration testing is carried out by professionals in a real engagement.
- Build a solid cybersecurity base before students move into internships and job roles.
- Close the gap between what is taught in the classroom and what the industry expects.
Key point: the bootcamp focused on the practical side of web application security — what a tester actually does, in what order, and why.
Why This Matters for BCS Students
By the fourth semester, you have covered programming, databases, and networking. Security is where those subjects meet. A penetration tester needs to read code, understand how a request travels to a server, and know how data is stored, which is exactly what the BCS syllabus has been preparing you for.
Employers in Nepal are hiring for security roles, but they look for evidence that you have done the work, not just studied it. A bootcamp like this gives you something concrete to talk about in an interview: the tools you used, the vulnerability classes you tested for, and how you would report a finding to a client.
💡 If you attended, keep practicing. Set up a lab on your own machine and work through deliberately vulnerable applications the skills fade fast without repetition.
About the Trainer
The bootcamp was led by Mr. Raju Ghimire, Head of Cybersecurity at Ureka Systems Pvt. Ltd. He works in the field every day, which meant students could ask the questions that textbooks do not answer — how scope is agreed with a client, what a finding looks like when it is written up, and which skills matter most early in a security career.
Learning security from someone who is actively defending real systems is very different from learning it from slides.
Who the Bootcamp Was For
Participation was exclusive to BCS 4th semester students. It suited anyone curious about how web applications are attacked and defended, and anyone considering cybersecurity as a career direction after graduation. No prior security experience was assumed the session started from fundamentals and built up.
- ✓ A full-day, hands-on bootcamp on web application penetration testing for BCS 4th semester students.
- ✓ Led by Mr. Raju Ghimire, Head of Cybersecurity at Ureka Systems Pvt. Ltd.
- ✓ Focused on detecting, exploiting, and fixing real vulnerabilities — not theory alone.
- ✓ Part of the IT Department’s ongoing effort to add industry exposure to the BCS curriculum.
Frequently Asked Questions
What is web application penetration testing?
It is an authorised, simulated attack on a website or web application. The tester looks for weaknesses the same way a real attacker would, then reports them so the owner can fix them before they are exploited.
Who could attend this bootcamp?
The bootcamp was open only to BCS 4th semester students of Texas College of Management and IT.
Was prior cybersecurity experience required?
No. The session was built for students with a normal BCS background in programming and networking, and started from the basics of how web applications are tested.
Will the IT Department run more sessions like this?
The IT Department organises bootcamps and training programmes through the academic year. Watch the college notice board and the news section of the website for upcoming announcements.
Final Thoughts
Classroom learning gives you the concepts. Sessions like this one give you the confidence to apply them. Texas College of Management and IT continues to run bootcamps and training programmes so that BCS students graduate with practical exposure alongside their degree — and so that the step from campus to a first job feels shorter.
