Reshad Ahmed Email & Phone Number

New York, United States

New York City Metropolitan Area

Penetration Testing Report:- Conducted a comprehensive threat assessment for a fictitious organization, identifying vulnerabilities like SQL injection, broken access control, misconfigurations in Amazon S3, and remote code execution on servers.- Recommendations included enforcing password complexity, applying patches, and implementing security measures for web applications. - Advised on enhancing security through IAM policies on AWS, regular audits of bucket configurations, and Network Level Authentication for remote desktop services.Remediation and Risk Mitigation Strategies:- Developed remediation approaches for OWASP Top 10 vulnerabilities, emphasizing input validation, output encoding, CSRF token adoption, TLS encryption, and proactive logging. - Formulated a risk register and implemented a mitigation strategy covering administrative access limits, robust password policies, code review processes, backup tape restoration testing, power source reliability, database controls, policy updates, and secure remote access.Active Directory IAM and Vulnerability Mitigation:- Initiated a comprehensive security elevation for Active Directory IAM with ABAC implementation in a Windows 10 virtual environment. - Utilized Nessus for vulnerability scans, addressing critical issues like SMB remote code execution and privilege escalation. - Applied nmap for scans and mitigation targeting unused services, focusing on SMB and Remote Desktop Protocol vulnerabilities. - Leveraged Redline for forensic analysis and implemented custom firewall rules to restrict unauthorized access and fortify overall security.

Web Application Vulnerability Exploitation:- Collaborated with two peers to construct and exploit a vulnerable web application on a Kali Linux virtual machine, leveraging XAMPP, HTML, CSS, JavaScript, PHP, and a MySQL database to encompass the identification and exploitation of SQL injection and broken access control vulnerabilities.- Executed vulnerability exploitation techniques as a regular user, employing common SQL injection commands to retrieve stored database information and demonstrated manipulation of values in URLs through an IDOR vulnerability, showcasing the ability to modify employee salary information displayed in the admin account. - Developed a secondary web application focused on security enhancement, incorporating OWASP best practices such as prepared statements and input validation to prevent unauthorized access to sensitive database information, demonstrating a commitment to robust security practices.Conducting ICMP Redirect and On-Path Attack:- Orchestrated an investigation into ICMP Redirects and On-Path Attacks, leading a team of four members in an in-depth exploration on an Ubuntu virtual machine.- Applied Python’s Scapy library and Docker containers to simulate redirected packets through a malicious router, programmatically altering gateway addresses and modifying packet contents to demonstrate on-path attacks.- Conducted real-time monitoring and analysis of network traffic using Wireshark, showcasing modified packet contents and ensuring comprehensive understanding of the attacks.- Implemented modifications to Docker configuration files to prevent redirects, achieving a 100% success rate in thwarting attacks and completing the project three days ahead of schedule.

Bronx, New York, United States

- Documented attendance, grades, and test scores to update permanent student records into Slate software, processing 20-30 student application files per day to surpass the average of 15

Cybersecurity Certification, Cybersecurity

Master Of Science - Ms, Cybersecurity

Bachelor Of Science - Bs, Biology/Biological Sciences, General