Cybersecurity student in Karachi, Pakistan, working toward the OSCP. I build small defensive and offensive security tools to learn by doing — SIEM pipelines, honeypots, network labs, and the odd CTF range.
I got into security through hands-on practice rather than theory — Kali Linux labs, packet captures, and breaking my own test environments before trying to fix them. Alongside a cybersecurity internship, I've spent five years in IT and operations roles, currently as IT Manager at Suenos International Marketing, which taught me the sysadmin side that most security work eventually touches: networks, access control, and keeping systems running. My focus right now is closing the gap between "I understand the concept" and "I can do this under exam conditions" for OSCP.
A layered defensive security system: SIEM-style logger, honeypots, an automatic firewall blocker, an IDS, and a Flask-based SOC dashboard to watch it all in one place.
A self-hosted mini "hack the box" — seven boxes covering base64, Caesar and XOR ciphers, cookies, devtools, and a multi-layer final challenge. Flags are SHA-256 verified client-side.
Type a password and see its entropy, character pool, and real crack-time estimates across five attacker speeds, plus a sped-up brute-force animation. Fully client-side — nothing typed ever leaves the browser.
A full-stack web app built as a learning project end-to-end — front end, backend, and a real database, deployed and shipped rather than left as a tutorial exercise.
Stood up a .onion hidden service on Kali, hardened Apache against fingerprinting (ServerTokens, ETag), then ran Shodan OSINT on exposed Hikvision cameras across Pakistan and wrote it up as a CTI-style report.