h
haroon4352

Haroon Atieeque

@haroon4352

CEH Certified Penetration Tester, Web App VAPT Specialist

Pakistan
Englisch, Urdu
Einige Informationen werden in englischer Sprache angezeigt.
Über mich
Certified Ethical Hacker (CEH) with hands-on experience in web application penetration testing, vulnerability assessments, and professional security reporting. I currently work as a Penetration Tester at a cybersecurity consulting firm, conducting real-world VAPT engagements aligned with OWASP WSTG, PTES, and NIST SP 800-115 standards. My reports go beyond scan results, clear CVSS-rated findings, proof-of-concept evidence, and practical remediation steps so you know exactly what's at risk and how to fix it.... Mehr lesen

Kompetenzen

h
haroon4352
Haroon Atieeque
offline • 

Meine Dienstleistungen

Programmierung & Technik
I will perform web application penetration testing and vapt report

Portfolio

Arbeitserfahrung

Cybernet

Junior Penetration Tester

Cybernet • Vollzeit

May 2026 - Present2 mos

Working as a Penetration Tester at CSZone Pvt. Limited, a cybersecurity consulting firm, conducting Vulnerability Assessment and Penetration Testing (VAPT) engagements for client web applications and networks. Key responsibilities include performing black-box and grey-box security assessments aligned with OWASP WSTG, PTES, and NIST SP 800-115 methodologies, identifying and validating vulnerabilities such as SQL injection, cross-site scripting (XSS), authentication bypass, IDOR, and misconfigured access controls, and documenting findings in professional client-ready reports with CVSS scoring, proof-of-concept evidence, and actionable remediation recommendations. Delivered comprehensive multi-target VAPT reports covering real client environments, including a critical exposed admin panel finding rated CVSS 9.8. Certified Ethical Hacker (CEH) with a strong foundation in offensive security, built through both professional engagements and hands-on lab-based practice (PortSwigger Web Security Academy).

Tech_Hub

Cyber Security Instructor

Tech Hub • Teilzeit

Sep 2025 - Jun 20269 mos

Delivered hands-on training in Cyber Security and Digital Forensics, covering networking fundamentals, Kali Linux setup, and system hardening. Trained students in digital evidence analysis and incident response through practical lab scenarios.

IT_Force

Offensive Security Engineer

IT Force • Freiberufler

Oct 2025 - May 20267 mos

Performed vulnerability scanning, reconnaissance, and beginner-level exploitation using Nmap, Burp Suite, Metasploit, and Wireshark. Applied core TCP/IP, OWASP, and Linux fundamentals to real-world attack scenarios.