Open to opportunities

muhammad abdullah

@muhammadabdullah5

Message

Enthusiastic bug hunter with in-depth knowledge in web ,mobile and APIs penetration testing.

Pakistan

Message

What I'm looking for

Looking for a challenging role that utilizes my skills in web application penetration testing and cyber security analysis to ensure the security of applications and systems.

I'm a passionate bug hunter with a strong background in web application penetration testing. With a hunger for knowledge, I continuously sharpen my skills by participating in various CTFS challenges. My developer mindset enables me to quickly identify bugs, and I'm well-versed in SQL, XSS, LFI, BASH SCRIPTING, and SHELL JAVASCRIPT, which helps me automate the entire procedure.

As a penetration tester, I've conducted testing for web, desktop, mobile applications, and APIs. I'm proficient in identifying vulnerabilities, including SQL Injection, Cross-Site Scripting, and Broken Authentication & Session Management. My expertise also includes mobile application penetration testing, cyber security analysis, and web application footprinting.

I'm a certified ethical hacker with a strong understanding of OWASP Top10, AWS Cloud Web Application testing, and Infra Penetration Testing. I'm proficient in using tools like BURP SUITE, KALI LINUX, NMAP, Metasploit, Nessus, Netcat, and Wireshark.

Experience

Current

application security enginner | bug bounty hunter

Current

Bugcrowd

Mar 2022 - Present (2 years 4 months)

I am doing a full time Pentesting Engineer job since threyears and I performed several activities in Web, API, Mobile, and Network penetration testing under OWASP Top 10, CWE, SANS 25 vulnerabilities. I also doing Active Directory penetration testing under MITRE ATT&CK framework. I highly skilled in conducting security assessments by using industry-standard tools (Burp Suite, Acunetix, Nmap) and t

Current