i
iqbal_latif

Iqbal

@iqbal_latif

Penetration Tester, DFIR, Cybersecurity Consultant

Pakistan
Engels, Urdu, Arabisch
Sommige informatie wordt in het Engels weergegeven.
Over mij
Cybersecurity practitioner providing Penetration Testing, DFIR, and GRC support. I work with web and network security, vulnerability assessment, digital forensics, incident analysis, security hardening, risk assessments, and security documentation. CEH certified with hands-on experience using Burp Suite, Nmap, Metasploit, Wireshark, Splunk, Ghidra, and Linux. Focused on practical, clear, and actionable security deliverables. ... Lees meer

Skills

i
iqbal_latif
Iqbal
offline • 
Gemiddelde reactietijd: 1 uur

Bekijk mijn diensten

Serverbeheer
I will configure wazuh siem detection rules
VanafUS$ 15 / projectMeer informatie
Technische teksten
I will create soc incident response playbooks
VanafUS$ 10 / projectMeer informatie

Portfolio

Werkervaring

Watchium_Security

Intern

Watchium Security • Parttime

Jun 2026 - Aug 2026 • 2 mos

Selected as a Top-Performing Intern within the Penetration Testing Team based on technical performance and quality of assessment work. Performed authorized black-box and grey-box web application and API penetration testing, across authentication, authorization, session management, access control, input validation, and application security controls. Conducted reconnaissance and attack-surface mapping, API enumeration, BOLA/IDOR and BFLA testing, CSRF validation, session and token analysis, rate-limit review. and controlled testing for SQL injection, XSS, command injection, and ReDoS behavior. Used Burp Suite Professional extensively for traffic interception, request manipulation, Repeater-based validation, site mapping, and evidence collection, supported by Nmap, ffuf, Nikto, curl, Browser DevTools, Kali Linux, and Fedora. Manually validated scanner observations to eliminate false positives and applied CVSS v3.1 scoring only to reproducible weaknesses with defensible impact. Identified a low-severity token-handling issue involving password-reset and email-verification tokens in URL query strings, along with several security-hardening observations. Produced an 87-page professional penetration testing report covering scope, methodology, technical evidence, findings, proof of concept, CVSS scoring, false-positive analysis, remediation recommendations, verification guidance, and final risk assessment.