v
v3cn4x00

Muhammad Arafat

@v3cn4x00

Penetration Tester and Web Developer

Pakistan
Engels
Sommige informatie wordt in het Engels weergegeven.
Over mij
I am a PNPT-certified Network Penetration Tester delivering practical, real-world security testing. I simulate real attacker behavior to identify vulnerabilities that matter. I perform external and internal network testing, manually validate findings, and provide clear security reports with actionable remediation guidance. All testing is conducted ethically, legally, and only with proper authorization.... Lees meer

Skills

v
v3cn4x00
Muhammad Arafat
offline • 
Gemiddelde reactietijd: 1 uur

Bekijk mijn diensten

AI websites & software
I will build a custom ai web app with nextjs and ai integration
VanafUS$ 100 / projectMeer informatie
Programmering en technologie
I will perform penetration testing, vapt and security assessment
VanafUS$ 250 / projectMeer informatie

Portfolio

Werkervaring

Penetration tester

Freelance • ZZP

Nov 2024 - Present • 1 yr 9 mos

Conducted internal and external network penetration testing to evaluate organizational security posture against real-world attack scenarios. Performed reconnaissance, asset discovery, port scanning, and service enumeration on internet-facing infrastructure to identify exposed services and misconfigurations. Simulated internal threat scenarios by assessing lateral movement, weak credentials, insecure protocols, and privilege escalation opportunities within internal networks. Identified vulnerabilities related to outdated services, poor access controls, weak authentication, and improper network segmentation. Validated findings through controlled exploitation while maintaining strict scope and authorization boundaries. Documented findings in clear, professional penetration test reports, including risk ratings, impact analysis, and actionable remediation recommendations. Communicated technical findings in a simplified manner suitable for both technical teams and non-technical stakeholders. Tools & Skills: Nmap, Burp Suite, Metasploit (basic), Wireshark, Nessus/OpenVAS, Linux, TCP/IP, DNS, Active Directory fundamentals, vulnerability assessment, reporting