Offensive Security | Penetration Tester | CEH (practical)
I'm a dedicated Offensive Security Specialist with over 4 years of experience in penetration testing and ethical hacking. My journey in cybersecurity began with a fascination for how systems can be secured by understanding how they can be broken.
I hold the CEH (Practical) certification and have successfully conducted security assessments for organizations across various sectors including finance, healthcare, and e-commerce. My approach combines automated tools with manual exploitation techniques to identify vulnerabilities that automated scanners often miss.
Currently, I'm focused on advanced penetration testing methodologies, red team exercises, and helping organizations build more resilient security architectures through continuous security assessment and awareness training.
> Issued by EC-Council. Covers ethical hacking methodologies and tools.
> Note: All projects are conducted ethically with permission. Details are high-level to maintain confidentiality.
> Conducted a full-scope pentest on a client's e-commerce platform, identifying SQL injection and XSS vulnerabilities. Provided remediation recommendations, reducing risk by 80%.
> Technologies: Burp Suite, OWASP Top 10.
> Simulated a red team attack on a corporate network, exploiting misconfigurations to gain unauthorized access. Delivered a detailed report with actionable fixes.
> Technologies: Nmap, Metasploit.
> Conducted extensive research on web vulnerabilities, focusing on Authentication, Access Control, XSS, IDOR, and SQL Injections. Successfully identified and reported vulnerabilities, contributing to improved web security practices.