Muhammad.

Supporting the offensive security team in identifying and mitigating vulnerabilities across the company’s infrastructure.
Vulnerability Assessment: Assisting in automated and manual security scans using tools like Burp Suite, Nmap, and Nessus.
Penetration Testing: Supporting gray-box and black-box tests on web applications and internal network segments.
Reporting: Documenting technical findings and contributing to remediation reports for stakeholders.
Security Research: Keeping up-to-date with the latest CVEs and exploiting techniques to improve internal security posture.

Conducted internal penetration testing on enterprise Active Directory environments.
Performed AD lateral movement, Kerberoasting, and domain privilege escalation.
Maintained and secured AD users, groups, GPOs, and hardening policies.
Authored detailed technical reports with attack paths and remediation guidance.
Delivered security awareness sessions for non-technical staff

Conducted penetration testing for 9 clients across web and network environments.
Used Nessus, Burp Suite, OWASP ZAP, and Nmap for vulnerability discovery.
Developed Python and Bash scripts to automate pentesting and reconnaissance tasks.
Produced risk-based reports, including CVSS severity scoring and remediation steps.

I am an international student doing a master's in cybersecurity at Saarland University.

My courses span from Security, Ai Security, cyber-physical system security, etc.

I did my 4-year bachelor's in cybersecurity from Pakistan in 2024.
My degree is officially recognized by KMK/ZAB as equivalent to a bachelor's degree in cybersecurity in Germany.