S M Mahad Shah

Conducted penetration tests on client web applications within a professional threat intelligence and cybersecurity firm. Performed real-world offensive security assessments, from reconnaissance through exploitation and reporting.

Built a custom C2 framework using well-known platforms as covert communication channels. Project began as independent research and was extended under formal faculty supervision.

Performed web application penetration testing across 8–10 client applications. Identified critical and high-severity vulnerabilities in the majority of applications tested.

Delivered Cyber Threat Intelligence (CTI) support, including threat investigations and dark web analysis. Participated in Red Team engagements, applying offensive techniques in operational environments.

Conducted comprehensive web application vulnerability assessments and penetration tests using industry-standard methodologies. Identified web vulnerabilities including IDOR, XSS, CSRF, SQL Injection, RCE, LFI, and PII disclosure.

Ongoing online program in Artificial Intelligence and Data Science led by instructors from the Matsuo-Iwasawa Lab, The University of Tokyo.

Pursuing a Bachelor of Science in Cybersecurity at Air University, Islamabad, Pakistan.

Advanced workshop covering web application security, binary exploitation, and blockchain security.

API Security Penetration Testing training from APIsec University.

Deep Web & Threat Hunting training from EC-Council.

Ethical Hacking training from EC-Council.

Certified Penetration Tester (C|PENT) certification from EC-Council.