m
mahnoornoor667l

Mahnoor

@mahnoornoor667l
5,0(1)

Web and API Security Testing, CTF Challenge Development

Pakistan
Anglais, Ourdou
Certaines informations sont présentées en anglais.
À propos de moi
I help developers and small teams find security issues in their web apps and APIs, and explain how to fix them. I work as a VAPT Engineer in Islamabad, testing access control, authentication, injection and business logic, and I write clear reports with evidence and remediation steps. I also create original CTF challenges for organizers and educators, and analyse suspicious files to report their behaviour and indicators. I'm studying for a BS in Cybersecurity at Air University. Please message me with your scope before ordering.... Plus d’infos

Compétences

m
mahnoornoor667l
Mahnoor
hors ligne • 
Temps de réponse moyen de 1 heure

Voir mes services

Programmation et Tech
I will perform web application penetration testing with a security report
De30 $US / projetPlus de détails
Assistance technique
I will perform static and dynamic malware analysis with a clear report
De30 $US / projetPlus de détails

Portfolio

Expérience professionnelle

Cyber

1 yr 7 mos

VAPT Engineer

Jul 2025 - Present • 1 yr 4 mos

VAPT Engineer at a cybersecurity firm in Islamabad (joined as a penetration testing intern in July 2025). • Web application and API security assessments (access control, authentication, injection, business logic) with validated findings and technical reports • Detection validation with controlled attack traffic and MITRE Caldera adversary emulation • Static and behavioural malware analysis in Cuckoo Sandbox; IOC extraction for investigations • Wazuh event investigation and SOAR integration/playbook testing in an existing deployment • Internal security assessment using CISO Assistant

Cyber Defense & Network Security Intern

Aug 2024 - Oct 2024 • 2 mos

Comparative analysis of firewall technologies, SIEM monitoring, alert analysis, and log management.

Cyber Security Intern

Aug 2024 - Sep 2024 • 1 mo

VAPT on vulnerable lab environments (DVWA, Metasploitable), identified SQL Injection, XSS, and command injection vulnerabilities, deployed and configured Wazuh SIEM for log collection and security event analysi

1 Avis
5,0

(1)
(0)
(0)
(0)
(0)
Détails de la notation
  • Niveau de communication avec le freelance
    5
  • À recommander à un ami
    5
  • Service conforme à la description
    5
1 à 1 avis sur 1
Trier par
Les plus pertinents
    M
    image-docs

    mubashir_fiver

    PK

    Pakistan

    5

    Thank you! so much for your quick and owesome service, that is exactly what i was expecting. I would love to buy her service again as the seller has provided the plagiarism report with the delivery which is exceptional.. !

    50 $US

    Prix

    1 jour

    Durée

    Utile?
    Oui
    Non