
M.Haris
Junior Penetration Tester
Competenze

Consulta i miei servizi

Portfolio
Esperienza lavorativa
junior penetration tester
Freelancer.com • Lavoratore autonomo
Jun 2026 - Present • 1 mo
As an independent Cybersecurity Analyst and Penetration Tester, I specialize in offensive security, vulnerability assessment, and identifying critical security flaws across web applications and network infrastructures. My core focus is to discover vulnerabilities before malicious actors can exploit them, ensuring comprehensive digital asset protection for clients globally. Key Responsibilities & Expertise: • Web Application Penetration Testing: Conducted deep security assessments on various web platforms, identifying critical vulnerabilities including the OWASP Top 10 (SQL Injection, Cross-Site Scripting (XSS), Broken Authentication, SSRF, and Misconfigurations). • Vulnerability Assessment: Utilized industry-standard automated scanners such as Nessus and Nuclei to perform comprehensive security audits, minimizing false positives and mapping potential attack surfaces. • Network Scanning & Enumeration: Proficiently used Nmap and advanced scanning techniques to map network topology, identify open ports, detect active services, and discover operating system vulnerabilities. • Automated & Manual Exploitation: Leveraged advanced tools like Burp Suite for manual traffic interception/analysis and Sqlmap for automated database vulnerability exploitation testing. • Bug Reporting & Remediation: Developed detailed, executive-ready technical reports for stakeholders, outlining identified security flaws, risk severity ratings, and actionable step-by-step remediation guidance to patch the vulnerabilities effectively. Track Record: • Successfully simulated and completed over 550 hands-on security lab environments on TryHackMe and Hack The Box, refining practical skills in network security, privilege escalation, and API testing. • Experienced in working with Kali Linux environments to deploy offensive security tools safely and efficiently. My goal is to deliver high-quality security insights, clear documentation, and realistic fix strategies that empower businesses to enhan