Open to opportunities

Abdul Moiz User

@abdulmoizkh

Message

I find and report web and API vulnerabilities through practical penetration testing.

Pakistan

Message

What I'm looking for

I'm seeking a remote or hybrid internship or entry-level role in penetration testing, bug bounty research, or application security where I can apply practical offensive-security skills to real-world systems.

I'm a third-year Cybersecurity student and freelance bug bounty researcher who identifies and reports vulnerabilities in web applications, APIs, and mobile platforms. I focus on API exploitation, authentication flaws, business-logic vulnerabilities, and practical offensive-security testing.

I've applied reconnaissance, OSINT, vulnerability scanning, penetration testing, and formal reporting during internships with PKCERT, Cisco Networking Academy, and Microsoft Learn Student Ambassadors. I also build security projects including a mitmproxy login-request interceptor, an ns-3 attack-and-defense module, and an ARP spoofing detector.

Experience

Work history, roles, and key accomplishments

Current

Bug Bounty & Security Researcher

Current

Freelance

Jan 2024 - Present (2 years 7 months)

Identifies and reports security vulnerabilities in web applications, APIs, and mobile platforms. Specializes in API exploitation and authentication-flaw discovery across live targets, and actively competes in Capture the Flag (CTF) challenges.

Penetration Testing API Security Bug Bounty Web Application Security OWASP Top 10 Burp suite Nmap Metasploit OSINT CTF

Education

Degrees, certifications, and relevant coursework

National University of Technology

Bachelor of Science, Cybersecurity

2024 -

Grade: 3.58

Activities and societies: Active member, University Cybersecurity Club

Pursuing a Bachelor of Science in Cybersecurity with a current CGPA of 3.58. Coursework includes network security, computer programming, digital forensics, and information security fundamentals.