# Abdul Rafay Qadri

Abdul Rafay Qadri is a remote worker on Himalayas, Bug Bounty Hunter at HackerOne, based in Pakistan.

Source: https://himalayas.app/@abdulrafayqadri

```text
Cybersecurity professional at HackerOne testing web apps, reporting vulnerabilities, and building tools to speed up reconnaissance.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Pakistan |
| Authorized to work in | Pakistan |
| Salary expectations | 45k+ EUR |
| Job categories | Penetration Tester, Red Team Operator, Vulnerability Researcher, Detection Engineer |
| Skills | Penetration Testing, Web Application Security, Vulnerability Assessment, OWASP Top 10, SQL Injection, XSS, Authentication testing, Bug Bounty Hunting, Reconnaissance, Red Team Operations, Detection Engineering, Security Information And Event Management (SIEM), Network Security, Python, BASH |
| LinkedIn | https://linkedin.com/in/rafayqadri |

## About

```text
At HackerOne, I test in-scope web apps for security problems, assess each finding, and write reports with suggested fixes.

At Secure4Tech, I do security testing and vulnerability checks in lab setups. I use Linux tools to investigate issues, document notes, and help with hands-on offensive security work.

As a Cybersecurity Intern at Developer Hub, I tested OWASP Juice Shop with OWASP ZAP and found SQL injection and XSS. I also added Helmet.js headers, JWT login, and bcrypt password hashing, and ran Nmap scans to help fix identified problems.

I'm developing Veylix to make early bug bounty work easier by finding subdomains and live hosts, scanning ports, and checking services. My other projects include an AI bug bounty assistant, WARFRONT, a Wazuh SIEM lab, and a Wi-Fi security testing toolkit for my own lab.
```

## Experience

### Bug Bounty Hunter (current)

[HackerOne](https://himalayas.app/companies/hackerone)

```text
Test web applications in scope for security vulnerabilities, assess severity, and write reports with suggested fixes.
```

Skills: Penetration-Testing, Web-Application-Security, Vulnerability-Assessment, Reporting

### Senior Cybersecurity Professional (current)

Secure4Tech

```text
Perform security testing and vulnerability checks in lab setups, use Linux tools for analysis, and support offensive security operations.
```

Skills: Security-Testing, Vulnerability-Assessment, Linux, Offensive-Security

### Cybersecurity Intern

Developer Hub. Feb 2026 - Mar 2026

```text
Tested OWASP Juice Shop with OWASP ZAP, identified SQL injection and XSS, and implemented security improvements including Helmet.js, JWT, and bcrypt.
```

Skills: OWASP-ZAP, SQL-Injection, XSS, Helmet.Js, JWT, Bcrypt, Validator.js, Winston, Nmap

## Education

### HITEC University

Bachelor of Cybersecurity, Cybersecurity. 2023 - Present

```text
Pursuing a Bachelor of Cybersecurity degree from HITEC University, expected to graduate in 2027.
```

## Tech stack

- GitHub
- Python
- FastAPI
- Snort
- Wireshark
- Ubuntu
- Kali Linux
- Git
- Burp Suite
- Nmap
- Metasploit
- OWASP ZAP
- Bash
- Wazuh
- Winston

To contact Abdul Rafay, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Hassan Jawaid](https://himalayas.app/@hassanjawaid): Penetration Tester/ Ethical Hacker, Cubix
- [Muhammad Sajjad](https://himalayas.app/@muhammadsajjad1): Application Security Engineer, Payactiv
- [Satwo User](https://himalayas.app/@satwouser): Security Researcher, Remote
- [Ayesha Ali](https://himalayas.app/@ayeshaali3): Penetration Tester, SecurityWall
- [Danish Abbas](https://himalayas.app/@danishabbas1): Independent Security Researcher, Self Employed
- [Muhammad Zaid](https://himalayas.app/@muhammadzaid7): Cybersecurity Intern, Mosse Cybersecurity Institute
- [Abdul Moiz User](https://himalayas.app/@abdulmoizkh): Bug Bounty & Security Researcher, Freelance
- [Muhammad Zohaib Zafar](https://himalayas.app/@muhammadzohaibzafar): Freelance Application Security Consultant, Fiverr
- [Dare Devil](https://himalayas.app/@daredevil): Science & Engineering Associate (OG II), United Bank Limited
- [S M Mahad Shah](https://himalayas.app/@sms404): Penetration Tester, Resecurity