v
v3cn4x00

Muhammad Arafat

@v3cn4x00

Penetration Tester and Web Developer

Pakistan
Inglese
Alcune informazioni sono riportate in lingua inglese.
Chi sono
I am a PNPT-certified Network Penetration Tester delivering practical, real-world security testing. I simulate real attacker behavior to identify vulnerabilities that matter. I perform external and internal network testing, manually validate findings, and provide clear security reports with actionable remediation guidance. All testing is conducted ethically, legally, and only with proper authorization.... Continua a leggere

Competenze

v
v3cn4x00
Muhammad Arafat
offline • 
Tempo di risposta medio: 1 ora

Consulta i miei servizi

Siti Web e software IA
I will build a custom ai web app with nextjs and ai integration
Programmazione e tecnologia
I will perform penetration testing, vapt and security assessment

Portfolio

Esperienza lavorativa

Penetration tester

Freelance • Lavoratore autonomo

Nov 2024 - Present1 yr 9 mos

Conducted internal and external network penetration testing to evaluate organizational security posture against real-world attack scenarios. Performed reconnaissance, asset discovery, port scanning, and service enumeration on internet-facing infrastructure to identify exposed services and misconfigurations. Simulated internal threat scenarios by assessing lateral movement, weak credentials, insecure protocols, and privilege escalation opportunities within internal networks. Identified vulnerabilities related to outdated services, poor access controls, weak authentication, and improper network segmentation. Validated findings through controlled exploitation while maintaining strict scope and authorization boundaries. Documented findings in clear, professional penetration test reports, including risk ratings, impact analysis, and actionable remediation recommendations. Communicated technical findings in a simplified manner suitable for both technical teams and non-technical stakeholders. Tools & Skills: Nmap, Burp Suite, Metasploit (basic), Wireshark, Nessus/OpenVAS, Linux, TCP/IP, DNS, Active Directory fundamentals, vulnerability assessment, reporting