Bio

With over 10 years of experience in the domain of Information Security, I love to dig deeper in security arena whether it's offensive or defensive. I have strong work experience of infrastructure security in conducting and managing offensive security engagements like Red Team engagements, Social Engineering assessments and Penetration tests. I am also experienced in conducting secure network architecture review engagements with client's internal network/infosec teams and organization management. Experienced in working closely with client's internal infosec teams in initiating and successfully closing offensive security projects. Specialties: System, Network and Web Application Penetration Testing (Nmap, Kali Linux, BurpSuite, Nmap, Metasploit, etc); Vulnerability Scanning (Nessus, Acunetix, Netsparker, Nikto, etc); Scripting (Python, Bash); Intrusion Detection / Network Security Monitoring (Security Onion, Snort, Bro, and Suricata); SIEM Technology (Elasticsearch, Logstash, Kibana (ELK), ArcSight, and Splunk); PCAP analysis (Tcpdump, Wireshark, NetworkMiner, NetWitness/Security Analytics). Milestones Achieved: • Conducted penetration testing for various clients of more than 80+ internal/external networks with 99.9% success rate. • Conducted application penetration testing of more than 150 applications (Web, Mobile and Desktop Based) for various clients. • Conducted several physical social engineering assessments for various clients of 40+ locations and 500+ employees with 98% success rate. Which included baiting, USB dropping, Rubber Ducky attacks, key card cloning using proxmark3 etc. • Conducted phishing assessments for various clients of 75,000 users of different nationalities with 85% success rate. • Conducted physical and logical assessments of various clients ATM machines for different vendors. • Conducted network architecture review of 15+ clients. • Conducted configuration review of 200+ network device, firewalls, servers, end user systems | Using Nipper Studio or Nessus Professional. Github: https://github.com/Hassham1