Tauheed Ahmad Khan Email & Phone Number

Security professional with over five years of experience in web application security testing, mobile application security testing and source code review. Certified OSCP and a Bug Bounty Hunter.Open Source Projects:-vuln-nodejs-app: https://github.com/tauh33dkhan/vuln-nodejs-appDeveloped an open-source vulnerable NodeJS application with 27+ exercises, targetingvarious web application vulnerabilities. This application provides a comprehensive learning environment forthose looking to improve their understanding of web application security. Some of the exercise included in application:WebMessage (XSS, Information Disclosure, CSRF), Websocket (XSS, Cross-Site Hijacking), CORS (Information Disclosure, CSRF), SSTI, ReactJS XSS, GraphQL (SQLi, CSRF, IDOR, Information Disclosure), XXE, JSONP injection etc. AioResolver:https://github.com/tauh33dkhan/aioresolveraioresolver is a fast DNS resolver tool it is capable of resolving over one thousand domain names in 0.2 seconds with accuracy targeting those who seek to resolve a lot of domain names. aioresolver uses python-adns module which provides Python binding of adns that let's you perform DNS queries of your choice.XSSTrike-extension:https://github.com/tauh33dkhan/XSStrike-extensionBrowser extension to quickly scan website for XSS vulnerabilities. It uses one of the most popular XSS discovering tool XSStrike in the backend to run the scan and then displays its output in the browser. I developed this project because I wanted a browser extension that can quickly scan the websites for XSS vulnerabilities so I decided to bring one of the most popular XSS finding tool XSStrike to browser. You can use this extension to scan the parameters of current webpage using scan option or use the crawl option to crawl the website for finding XSS.Hackerone Profilehackerone.com/bughunterninjaHackTheBox Profilewww.hackthebox.eu/profile/18649GitHubgithub.com/tauh33dkhanTwitter twitter.com/tauh33dkhan

Listed skills include Python, Api Security Testing, Penetration Testing, Application Security, and 8 others.

• 

  Ss Pg College

  Business/Commerce, General