Ashhad Ali Email & Phone Number

Pakistan

Pakistan

Performed penetration testing and vulnerability assessments on web applications, networks, and mobile apps using advanced tools.Discovered and remediated high-severity vulnerabilities like SQL injection, IDOR, and application-level DDoS threats, along with medium-severity issues such as CSRF and broken authentication.Documented detailed reports outlining vulnerabilities, their impacts, and recommended mitigation strategies.Updated and implemented secure software development… Show more Performed penetration testing and vulnerability assessments on web applications, networks, and mobile apps using advanced tools.Discovered and remediated high-severity vulnerabilities like SQL injection, IDOR, and application-level DDoS threats, along with medium-severity issues such as CSRF and broken authentication.Documented detailed reports outlining vulnerabilities, their impacts, and recommended mitigation strategies.Updated and implemented secure software development policies, ensuring adherence to secure coding standards and educating development teams.Conducted source code reviews for applications developed in Node.js, Angular, and PHP, identifying vulnerabilities and suggesting security improvements.Collaborated with IT teams to share security insights, coordinate response efforts, and implement security measures.Utilized SAST and DAST tools, deployed containers via CI/CD pipelines, and addressed security incidents, including AWS S3 bucket issues. Show less

Sindh, Pakistan

Identifying security vulnerabilities and weaknesses in web applications, software, and systems.Conducting thorough security assessments, including penetration testing and vulnerability analysis.Participating in bug bounty programs to uncover and report security flaws.Employing manual and automated testing techniques to identify potential exploits and vulnerabilities.Crafting detailed and actionable vulnerability reports for organizations and platforms.Collaborating with… Show more Identifying security vulnerabilities and weaknesses in web applications, software, and systems.Conducting thorough security assessments, including penetration testing and vulnerability analysis.Participating in bug bounty programs to uncover and report security flaws.Employing manual and automated testing techniques to identify potential exploits and vulnerabilities.Crafting detailed and actionable vulnerability reports for organizations and platforms.Collaborating with development teams to ensure proper remediation of identified issues.Demonstrating ethical hacking practices and responsible disclosure of vulnerabilities.Continuously improving technical skills and staying updated on the latest hacking techniques and security trends.Contributing to the improvement of security postures by enhancing defensive strategies.Building a strong network within the cybersecurity and bug hunting community.Providing insights and recommendations to organizations for strengthening their cybersecurity measures.Upholding the highest ethical standards while uncovering vulnerabilities and contributing to a safer digital landscape Show less

Canada

• Conducted penetration testing and vulnerability assessments on computer systems, networks, and applications using Nmap, Nessus, and OpenVAS. • Utilized a range of tools and techniques, including Metasploit and Burp Suite, to simulate real-world attacks and identify many vulnerabilities. • Performed automated and manual analysis of vulnerability assessments on Web, API, Mobile, Network/OS/Server. • Collaborated with clients to understand security needs and provided… Show more • Conducted penetration testing and vulnerability assessments on computer systems, networks, and applications using Nmap, Nessus, and OpenVAS. • Utilized a range of tools and techniques, including Metasploit and Burp Suite, to simulate real-world attacks and identify many vulnerabilities. • Performed automated and manual analysis of vulnerability assessments on Web, API, Mobile, Network/OS/Server. • Collaborated with clients to understand security needs and provided guidance and recommendations for vulnerability remediation. • Created detailed reports outlining findings and improvement recommendations. • Identified web application vulnerabilities using OWASP ZAP, SQL map, and nuclei. • Provided guidance to clients for improving security posture, utilizing security-focused technologies such as firewalls and intrusion detection/prevention systems. • Conducted comprehensive application security risk assessments for various projects, resulting in the identification and remediation of 20+ vulnerabilities. • Assisted in defining and implementing risk mitigation strategies, which were implemented by clients. • Provided expert advice on secure coding practices to development teams, helping them to write more secure code. • Documented findings and recommendations for secure application development in clear and concise reports. Show less

Cyber Security, Cyber Security

Undergraduate, Computer Software Engineering, 2.9

Activities and Societies: Software Engineering Society The Software Engineering Society is a dynamic and interactive student organization.

Intermediate, Computer Science