Freelance Security Engineers in LahoreFreelance Security Engineers in Lahore
ProjectsPeople
Abubakar Chan's avatar
Abubakar Chan
proLahore, Pakistan
AI Automation Engineer | Full-Stack Apps & Integrations
$100k+
Earned
66x
Hired
4.9
Rating
147
Followers
ANYTHING_EXPERT

Expert

REPLIT_EXPERT

Expert

+2
AI Automation Engineer | Full-Stack Apps & Integrations
Cover image for Gut Health SaaS Platform Development
Gut Health SaaS Platform Development
0
6
Cover image for Provider Portal for Healthcare MSO
Provider Portal for Healthcare MSO
3
43
Cover image for Magnai | UK Public Affairs
Magnai | UK Public Affairs
6
81
Cover image for Humoni - secure housing in under 72 hours
Humoni - secure housing in under 72 hours
6
139
Security Engineer(2)
Ahmed Khan's avatar
Ahmed Khan
Lahore, Pakistan
Cybersecurity specialist with ability to identify flaws
Cybersecurity specialist with ability to identify flaws
Cover image for I simulated a real-world Active
I simulated a real-world Active Directory (AD) attack to identify and exploit misconfigurations within a Windows domain environment. The goal was to practice enumeration techniques, escalate privileges to domain admin, and establish persistent access. I started with LDAP enumeration using ldapsearch to map domain users and groups. Using BloodHound, I visualized attack paths and identified a Kerberoastable service account — a weak SPN tied to an outdated service. I extracted the hash using GetUserSPNs.py (http://GetUserSPNs.py) and cracked it with Hashcat, revealing the cleartext password. I then used Pass-the-Hash to authenticate as a domain admin using PsExec. To maintain persistence, I added a domain admin backdoor account using Mimikatz. Finally, I cleared event logs to avoid detection and exported a full attack report for remediation. Tools Used: ldapsearch, BloodHound, Hashcat, GetUserSPNs.py (http://GetUserSPNs.py), PsExec, Mimikatz, eventlog (for cleanup) Deliverable: Full attack timeline with screenshots, enumeration outputs, and security recommendations.
0
26
Cover image for I conducted a complete web
I conducted a complete web application security assessment on Damn Vulnerable Web Application (DVWA) using manual and automated testing techniques. The goal was to identify and exploit OWASP Top 10 vulnerabilities. I mapped the application using Burp Suite and discovered multiple injection points. I exploited SQL Injection to bypass authentication and extract sensitive data from the database using sqlmap. I also tested for Cross-Site Scripting (XSS) with custom payloads and successfully hijacked session cookies using document.cookie injection. I chained a file upload vulnerability with a PHP reverse shell to gain remote access to the server. All findings were documented with proof-of-concept screenshots and step-by-step remediation guidance. Tools Used: Burp Suite, sqlmap, OWASP ZAP, curl, custom payloads Deliverable: A detailed report including vulnerability exploitation steps, proof-of-concept, and mitigation strategies.
0
69
Cover image for I performed a complete network
I performed a complete network penetration test on a deliberately vulnerable Linux machine (Metasploitable2) to simulate a real-world attacker scenario. The objective was to identify exploitable services, gain initial access, escalate privileges to root, and extract sensitive data. I started with reconnaissance using nmap to discover open ports and services. I identified outdated and vulnerable services including vsftpd 2.3.4 and Samba 3.0.20. Using Metasploit, I exploited the vsftpd backdoor to gain initial shell access. I then used shell_to_meterpreter to upgrade my session to a Meterpreter shell, giving me greater control. I dumped password hashes from /etc/shadow and cracked them using John the Ripper. Finally, I escalated privileges to root using the Samba usermap_script exploit and documented the entire process with screenshots. Tools Used: nmap, Metasploit, Meterpreter, John the Ripper, searchsploit Deliverable: A comprehensive report including attack timeline, exploited CVEs, and remediation recommendations.
0
62
Cover image for I discovered a stored cross-site
I discovered a stored cross-site scripting (XSS) vulnerability in a practice web application's comment section that allowed me to inject malicious JavaScript that would execute in any user's browser. By submitting a comment containing a script payload, I successfully stole session cookies from other users and could have hijacked their accounts, performed actions on their behalf, or defaced the website. This finding was documented in a comprehensive report including proof-of-concept screenshots showing cookie theft, CVSS risk scoring of 6.5 (Medium), and step-by-step remediation guidance including input sanitization and output encoding. This assessment demonstrates my ability to find client-side vulnerabilities that can compromise every user visiting the site.
0
66
Security Engineer(3)
Mashooque Ali's avatar
Mashooque Ali
Sector X Lahore DHA, Pakistan
Expert Cybersecurity Solutions Tailored for You
Expert Cybersecurity Solutions Tailored for You
Cover image for Information Security Compliance Services
Information Security Compliance Services
0
41
Cover image for SOC as a Service (Security Operations Center)
SOC as a Service (Security Operations Center)
0
26
Cover image for Implementation of Information Security Management System (ISMS)
Implementation of Information Security Management System (ISMS)
0
30
Placeholder project card media
View more →
Security Engineer(3)
Ayesha Javed's avatar
Ayesha Javed
Lahore, Pakistan
Where Founder Vision Is Engineered into Agentic AI Products.
46
Followers
Where Founder Vision Is Engineered into Agentic AI Products.
Cover image for Out of Harm's Way – AI-Powered Code Security MLOps System
Out of Harm's Way – AI-Powered Code Security MLOps System
1
6
Cover image for Ghibli-Style Milestone Animation The Context/Problem: I need...
Ghibli-Style Milestone Animation The Context/Problem: I needed a unique visual asset to celebrate reaching 15,000 followers on LinkedIn and showcase my creative AI capabilities. The Solution/Execution: I built a custom Google AI workflow to generate a 10-second, four-scene animated short film styled entirely in a Studio Ghibli aesthetic. The Value Delivered: The video merged technical prompting with storytelling, generating much impressions within hours and proving AI's power for scroll-stopping brand assets.
2
109
Cover image for AI can help founders build
AI can help founders build products faster than ever. But building is only half the journey. In this episode, I share a real engineering lesson about why products that look "finished" often aren't ready for production and what actually happens between a working prototype and a successful launch. Building is no longer the bottleneck. Launching is. #FounderEngineeringJournal #AgenticAI #AISaaS #ProductEngineering #StartupFounder #AIEngineer #MVP #Launch #ProductDevelopment #BuildInPublic
2
4
467
Cover image for I wish I had it
I wish I had it months ago. (Launching Proult - Desktop App) I spent 20 minutes looking for a Stripe credential. I checked my notes. My browser bookmarks. Old chats. Random text files. Not because I forgot it. Because I couldn't remember where I had saved it. That's when I realized the most dangerous phrase in a developer's workflow isn't: "I forgot." It's: "I've saved it somewhere." As freelancers, students, developers, and builders, we constantly juggle multiple projects simultaneously. And each project comes with its own ecosystem of information: • Client details • Credentials and passwords • API keys and secrets • Domains and hosting accounts • GitHub repositories • Deployment links • Meeting notes • Project requirements • Time logs and deadlines The problem isn't that we don't save this information. The problem is that we save it everywhere. -A Notepad file for credentials. -A spreadsheet for clients. -A project management tool for tasks. -Bookmarks for links. -Chat messages for "important" details. And before long, finding information takes more time than using it. After one too many "I know I saved this somewhere" moments, I decided to build something for myself. A single place where every project has its own secure workspace. Not just for storing passwords, but for managing everything related to that project: clients, credentials, API keys, notes, services, links, statuses, and time tracking. That's how "𝐏𝐫𝐨𝐮𝐥𝐭" started. So over the last few days, I've been building Proult, A local-first desktop application designed to keep everything related to a project in one place. -AES-encrypted credentials, API keys, and secrets -Project and client management -Built-in time tracking -Organization through project domains (Freelance, Personal, Organization, University) -Global search across projects, clients, credentials, and services -Full import/export support so your data always remains yours -Pinned projects, tags, notes, deployment links, and service management -Local-first architecture; no cloud dependency, everything stays under your control Still polishing it, but building it has already improved my own workflow significantly. Turns out, the best developer tools are often the ones built to solve your own frustrations first.
1
365
Security Engineer(1)
Mohsin Ishfaq's avatar
Mohsin Ishfaq
Lahore, Pakistan
Manual & Automation QA Engineer | Web, API & End-to-End Test
New to Contra
Manual & Automation QA Engineer | Web, API & End-to-End Test
Cover image for ConsidraCare – Healthcare & Home
ConsidraCare – Healthcare & Home Care Management Platform QA [Canada] | Sep 2024 – May 2025 | NDA Protected - Approach Only Project Overview: Canadian home-care platform enabling agencies to manage caregivers, clients, scheduling, care plans, payroll, invoicing. 4 portals: Client, Caregiver, Admin, Operations. My Role: QA Engineer (Manual + Automation + Security) Work I Did: Independently tested all 4 portals covering complex workflows: caregiver onboarding with background checks, shift scheduling with conflict detection, care plan management (ADLs), payroll calculations with overtime rules, invoicing with insurance integration Designed and executed 150+ test cases: Functional, Regression, Smoke, Cross-portal, End-to-End Built automated regression suite from scratch using Selenium Python + PyTest - 80 test cases automated, reduced regression time from 2 days to 4 hours API Testing: Validated 30+ REST APIs using Postman - caregiver availability, shift assignment, payroll generation, client billing - checked status codes, response schema, error handling, auth Database Testing: SQL verification - validated payroll calculations match DB, schedule conflicts prevented at DB level, invoice totals, data integrity across portals Security Testing: Foundational web security using Kali Linux tools - XSS in care notes, SQL Injection in search, authentication bypass, brute-force on login, role escalation checks HIPAA-adjacent validation: Ensured caregiver can only see assigned clients, client PHI masked for unauthorized roles, audit logs for sensitive actions Bug Reporting: Logged 60+ bugs in Jira with steps, expected/actual, severity, video proof for critical. Worked with devs through fix verification Release verification: Production smoke testing before each release, preventing critical payroll bugs Impact: Reduced production bugs by 40%, regression time by 75% Tools: Selenium Python, PyTest, Postman, MySQL, Jira, Kali Linux (Burp Suite, OWASP ZAP), BrowserStack, GitHub Domain: Healthcare | Type: Web Application | NDA: No confidential screenshots or data shared - approach only
0
73
Cover image for SauceDemo E2E Automation – Playwright
SauceDemo E2E Automation – Playwright Python + PyTest | POM Framework | 6 Tests Automated Overview: Automated https://www.saucedemo.com using Playwright Python + PyTest + Page Object Model built from scratch. Test Coverage (6 Tests): TC01 Valid login with standard_user TC03 Locked out user error validation TC09 Add single item to cart (Backpack) TC11 Remove item from products page TC15 Checkout with missing first name validation TC17 Complete happy path checkout E2E Framework: POM with login_page, products_page, cart_page, checkout_page, conftest fixtures, pytest-html reports, video recording Execution: 6/6 Passed | GitHub: https://github.com/mohsin-ishfaq/saucedemo-playwright-automation Tech: Python, Playwright Sync API, PyTest, POM
0
71
Cover image for ClixCreative – AI-Powered Event Management
ClixCreative – AI-Powered Event Management Platform QA | Multi-Portal | NDA Protected Overview: Multi-portal platform connecting event organizers, photographers, videographers, attendees with AI face recognition for media discovery. 4 portals: Organizer, Creator, Attendee, Admin. My Role: Sole QA Engineer (handled 4 concurrent products at Analytica Data) Work I Did: Managed complete QA lifecycle independently for 4 portals AI Features: Tested face recognition accuracy - upload 100 event photos, AI groups by person, attendee searches own photos by selfie. Validated AI photo search precision/recall Event Management: Event creation, invitation, creator assignment (photo/video), schedule, budget Media Workflows: Upload 500+ photos/videos (2GB), processing, AI tagging, attendee access control, download with watermark, payment for premium downloads Payment testing: Event package pricing, creator payout, attendee purchase - Stripe integration validation RBAC: Organizer only sees own events, Creator only assigned events, Attendee only own media Built comprehensive regression suites - 120+ test cases maintained Production validation before releases Impact: Stable releases while handling 4 products in parallel, maintained high coverage regression Tools: Manual Testing, Regression, Jira, Chrome DevTools, BrowserStack Domain: Event Management + AI/Media Platform
0
68
Cover image for FAB Glass & Mirror –
FAB Glass & Mirror – Custom Glass & Mirror E-commerce Platform QA [USA] | Feb 2022 – Dec 2023 | NDA Protected Overview: US e-commerce since 2011 - custom cut glass, tempered glass, shower doors, mirrors, table tops, railings, acrylic - nationwide shipping, hundreds of thousands customers. Work I Did: Tested complex custom quoting engine: pricing by dimensions (width/height), glass type, thickness, edgework (polished/beveled), add-ons (holes, notches) Validated measurement validation: min/max limits, aspect ratio, boundary conditions - found bug allowing 0.1 inch glass Full ordering workflow: configurator > cart > checkout (shipping calculation by size/weight) > payment > order tracking Found 50+ defects in pricing algorithms - e.g., tempered glass 0.5" pricing calculated as 0.25", shower door hinge cutout fee missing UI/UX validation: configurator usability, measurement input error messages, mobile responsiveness Regression after each release - prevented re-introduction of pricing bugs Impact: Improved pricing accuracy to 99.8%, reduced incorrect quotes by 90% Tools: Manual Testing, Regression, UI/UX Validation Domain: E-commerce Custom Manufacturing | Market: USA
0
73
Security Engineer(1)
Raza Ahmad's avatar
Raza Ahmad
Lahore, Pakistan
Google Workspace Certified Admin | Email Migration Expert
New to Contra
Google Workspace Certified Admin | Email Migration Expert
Cover image for Deleted Domain from Client's Google Workspace
Deleted Domain from Client's Google Workspace
0
57
Cover image for Wordpress Manual Site Tranfer With
Wordpress Manual Site Tranfer With Big Database files
0
46
Cover image for Helped Client with Wordpress Migration
Helped Client with Wordpress Migration
0
48
Cover image for Clients Google Workspace Complete Setup
Clients Google Workspace Complete Setup
0
55
Security Engineer(1)
Yusra Shahid's avatar
Yusra Shahid
Lahore, Pakistan
Full-Stack Dev | React · Node.js · AI Apps
New to Contra
Full-Stack Dev | React · Node.js · AI Apps
Cover image for USB Encryptor — A security
USB Encryptor — A security system built with Python/Flask and AES-CBC encryption that protects USB drive files with password authentication. Features file encryption/decryption, brute-force protection with 30-second lockout after 3 failed attempts.
0
45
Cover image for EventSphere — A React-based event
EventSphere — A React-based event discovery platform with search functionality, category filters, and upcoming events listing.
0
39
Cover image for Pettaline — E-commerce flower shop
Pettaline — E-commerce flower shop built with HTML, CSS and JavaScript. Features include product listings, product detail pages, shopping cart, and responsive multi-page design.
0
48
Cover image for DineX — Food Delivery Web
DineX — Food Delivery Web App using Python/Flask. Included Dijkstra’s algorithm for optimized delivery routes and AVL trees for efficient data management.
0
53
Security Engineer(1)