
Muhammad Arafat
Penetration Tester and Web Developer
Kompetenzen

Meine Dienstleistungen


Portfolio
Arbeitserfahrung
Penetration tester
Freelance • Selbstständig
Nov 2024 - Present • 1 yr 9 mos
Conducted internal and external network penetration testing to evaluate organizational security posture against real-world attack scenarios. Performed reconnaissance, asset discovery, port scanning, and service enumeration on internet-facing infrastructure to identify exposed services and misconfigurations. Simulated internal threat scenarios by assessing lateral movement, weak credentials, insecure protocols, and privilege escalation opportunities within internal networks. Identified vulnerabilities related to outdated services, poor access controls, weak authentication, and improper network segmentation. Validated findings through controlled exploitation while maintaining strict scope and authorization boundaries. Documented findings in clear, professional penetration test reports, including risk ratings, impact analysis, and actionable remediation recommendations. Communicated technical findings in a simplified manner suitable for both technical teams and non-technical stakeholders. Tools & Skills: Nmap, Burp Suite, Metasploit (basic), Wireshark, Nessus/OpenVAS, Linux, TCP/IP, DNS, Active Directory fundamentals, vulnerability assessment, reporting