Ahmed Khan
Cybersecurity specialist with ability to identify flaws
New to Contra
Ahmed is ready for their next project!
You check personal email on work laptop. Quick. No big deal. You use work email to sign up for a newsletter. Convenient. But your employer owns that work email. They can read it. Search it. Retain it forever. And if you leave, you lose everything attached to it. 💼📧
Work email...
I simulated a real-world Active Directory (AD) attack to identify and exploit misconfigurations within a Windows domain environment. The goal was to practice enumeration techniques, escalate privileges to domain admin, and establish persistent access.
I started with LDAP...
I conducted a complete web application security assessment on Damn Vulnerable Web Application (DVWA) using manual and automated testing techniques. The goal was to identify and exploit OWASP Top 10 vulnerabilities.
I mapped the application using Burp Suite and discovered multiple...
I performed a complete network penetration test on a deliberately vulnerable Linux machine (Metasploitable2) to simulate a real-world attacker scenario. The objective was to identify exploitable services, gain initial access, escalate privileges to root, and extract sensitive...
You type your bank's web address. Carefully. Correct spelling. Press enter. The familiar login page appears. You enter your password. Everything feels normal. But you're not on your bank's site. You're on a perfect copy. And someone just got your credentials. That's pharming....
