m
mahnoornoor667l

Mahnoor

@mahnoornoor667l
5.0(1)

Web and API Security Testing, CTF Challenge Development

Pakistán
Inglés, Urdu
Parte de la información aparece en idioma inglés.
Sobre mí
I help developers and small teams find security issues in their web apps and APIs, and explain how to fix them. I work as a VAPT Engineer in Islamabad, testing access control, authentication, injection and business logic, and I write clear reports with evidence and remediation steps. I also create original CTF challenges for organizers and educators, and analyse suspicious files to report their behaviour and indicators. I'm studying for a BS in Cybersecurity at Air University. Please message me with your scope before ordering.... Lee más

Habilidades

m
mahnoornoor667l
Mahnoor
desconectado • 
Tiempo medio de respuesta: 1 hora

Revisa mis servicios

Programación y tecnología
I will perform web application penetration testing with a security report
DeUSD 30 / proyectoMás información
Soporte técnico
I will perform static and dynamic malware analysis with a clear report
DeUSD 30 / proyectoMás información

Porfolio

Experiencia laboral

Cyber

1 yr 7 mos

VAPT Engineer

Jul 2025 - Present • 1 yr 4 mos

VAPT Engineer at a cybersecurity firm in Islamabad (joined as a penetration testing intern in July 2025). • Web application and API security assessments (access control, authentication, injection, business logic) with validated findings and technical reports • Detection validation with controlled attack traffic and MITRE Caldera adversary emulation • Static and behavioural malware analysis in Cuckoo Sandbox; IOC extraction for investigations • Wazuh event investigation and SOAR integration/playbook testing in an existing deployment • Internal security assessment using CISO Assistant

Cyber Defense & Network Security Intern

Aug 2024 - Oct 2024 • 2 mos

Comparative analysis of firewall technologies, SIEM monitoring, alert analysis, and log management.

Cyber Security Intern

Aug 2024 - Sep 2024 • 1 mo

VAPT on vulnerable lab environments (DVWA, Metasploitable), identified SQL Injection, XSS, and command injection vulnerabilities, deployed and configured Wazuh SIEM for log collection and security event analysi

1 Reseñas
5.0

(1)
(0)
(0)
(0)
(0)
Desglose de calificaciones
  • Nivel de comunicación del Freelancer
    5
  • Recomendar a un amigo
    5
  • Servicio según lo descrito
    5
1-1 de 1 reseñas
Ordenar por
Más relevante
    M
    image-docs

    mubashir_fiver

    PK

    Pakistán

    5

    Thank you! so much for your quick and owesome service, that is exactly what i was expecting. I would love to buy her service again as the seller has provided the plagiarism report with the delivery which is exceptional.. !

    USD 50

    $

    1 día

    Tiempo

    Útil?
    Sí
    No