Freelance Security Engineers in Lahore

Freelance Security Engineers in LahoreFreelance Security Engineers in Lahore

Projects People

proLahore, Pakistan

AI Integration & Automation Engineer | Full-Stack Web Apps

$50k+: Earned

65x: Hired

4.9: Rating

126: Followers

Expert

Expert

+2

AI Integration & Automation Engineer | Full-Stack Web Apps

Cover image for Provider Portal for Healthcare MSO

Provider Portal for Healthcare MSO

3

31

Cover image for Magnai | UK Public Affairs

Magnai | UK Public Affairs

5

61

Cover image for Humoni - secure housing in under 72 hours

Humoni - secure housing in under 72 hours

4

113

Cover image for Wellbeing Wizard AI

Wellbeing Wizard AI

8

177

Security Engineer(1)

Lahore, Pakistan

Cybersecurity specialist with ability to identify flaws

New to Contra

Cybersecurity specialist with ability to identify flaws

Cover image for I simulated a real-world Active

I simulated a real-world Active Directory (AD) attack to identify and exploit misconfigurations within a Windows domain environment. The goal was to practice enumeration techniques, escalate privileges to domain admin, and establish persistent access. I started with LDAP enumeration using ldapsearch to map domain users and groups. Using BloodHound, I visualized attack paths and identified a Kerberoastable service account — a weak SPN tied to an outdated service. I extracted the hash using GetUserSPNs.py (http://GetUserSPNs.py) and cracked it with Hashcat, revealing the cleartext password. I then used Pass-the-Hash to authenticate as a domain admin using PsExec. To maintain persistence, I added a domain admin backdoor account using Mimikatz. Finally, I cleared event logs to avoid detection and exported a full attack report for remediation. Tools Used: ldapsearch, BloodHound, Hashcat, GetUserSPNs.py (http://GetUserSPNs.py), PsExec, Mimikatz, eventlog (for cleanup) Deliverable: Full attack timeline with screenshots, enumeration outputs, and security recommendations.

0

14

Cover image for I conducted a complete web

I conducted a complete web application security assessment on Damn Vulnerable Web Application (DVWA) using manual and automated testing techniques. The goal was to identify and exploit OWASP Top 10 vulnerabilities. I mapped the application using Burp Suite and discovered multiple injection points. I exploited SQL Injection to bypass authentication and extract sensitive data from the database using sqlmap. I also tested for Cross-Site Scripting (XSS) with custom payloads and successfully hijacked session cookies using document.cookie injection. I chained a file upload vulnerability with a PHP reverse shell to gain remote access to the server. All findings were documented with proof-of-concept screenshots and step-by-step remediation guidance. Tools Used: Burp Suite, sqlmap, OWASP ZAP, curl, custom payloads Deliverable: A detailed report including vulnerability exploitation steps, proof-of-concept, and mitigation strategies.

0

35

Cover image for I performed a complete network

I performed a complete network penetration test on a deliberately vulnerable Linux machine (Metasploitable2) to simulate a real-world attacker scenario. The objective was to identify exploitable services, gain initial access, escalate privileges to root, and extract sensitive data. I started with reconnaissance using nmap to discover open ports and services. I identified outdated and vulnerable services including vsftpd 2.3.4 and Samba 3.0.20. Using Metasploit, I exploited the vsftpd backdoor to gain initial shell access. I then used shell_to_meterpreter to upgrade my session to a Meterpreter shell, giving me greater control. I dumped password hashes from /etc/shadow and cracked them using John the Ripper. Finally, I escalated privileges to root using the Samba usermap_script exploit and documented the entire process with screenshots. Tools Used: nmap, Metasploit, Meterpreter, John the Ripper, searchsploit Deliverable: A comprehensive report including attack timeline, exploited CVEs, and remediation recommendations.

0

30

Cover image for I discovered a stored cross-site

I discovered a stored cross-site scripting (XSS) vulnerability in a practice web application's comment section that allowed me to inject malicious JavaScript that would execute in any user's browser. By submitting a comment containing a script payload, I successfully stole session cookies from other users and could have hijacked their accounts, performed actions on their behalf, or defaced the website. This finding was documented in a comprehensive report including proof-of-concept screenshots showing cookie theft, CVSS risk scoring of 6.5 (Medium), and step-by-step remediation guidance including input sanitization and output encoding. This assessment demonstrates my ability to find client-side vulnerabilities that can compromise every user visiting the site.

0

55

Security Engineer(3)

Sector X Lahore DHA, Pakistan

Expert Cybersecurity Solutions Tailored for You

Expert Cybersecurity Solutions Tailored for You

Cover image for Information Security Compliance Services

Information Security Compliance Services

0

34

Cover image for SOC as a Service (Security Operations Center)

SOC as a Service (Security Operations Center)

0

20

Cover image for Implementation of Information Security Management System (ISMS)

Implementation of Information Security Management System (ISMS)

0

23

Placeholder project card media

View more →

Security Engineer(3)

Lahore, Pakistan

Where Founder Vision Is Engineered into Agentic AI Products.

31: Followers

Where Founder Vision Is Engineered into Agentic AI Products.

Cover image for Out of Harm's Way – AI-Powered Code Security MLOps System

Out of Harm's Way – AI-Powered Code Security MLOps System

1

6

Cover image for After working with founders across

After working with founders across AI, SaaS, and automation projects, I realized one thing: Most great ideas don't fail because of the technology, they fail because turning them into a real product is incredibly complex. That's the problem I enjoy solving. From AI product strategy and system architecture to MVPs, agentic AI, workflow automation, and production-ready web and mobile applications, I help founders transform ambitious ideas into products that people actually use. I finally recorded a short introduction to share a little about who I am, what I build, and how I work with startups. If you're building an AI product, launching an MVP, or looking to automate your business with AI, I'd love to connect. Looking forward to collaborating with more founders and teams here on Contra. #AI #AgenticAI #Startup #SaaS #MVP #ProductDevelopment #Automation #WebDevelopment #MobileDevelopment #AIEngineering #Founders #Contra

6

258

Cover image for I wish I had it

I wish I had it months ago. (Launching Proult - Desktop App) I spent 20 minutes looking for a Stripe credential. I checked my notes. My browser bookmarks. Old chats. Random text files. Not because I forgot it. Because I couldn't remember where I had saved it. That's when I realized the most dangerous phrase in a developer's workflow isn't: "I forgot." It's: "I've saved it somewhere." As freelancers, students, developers, and builders, we constantly juggle multiple projects simultaneously. And each project comes with its own ecosystem of information: • Client details • Credentials and passwords • API keys and secrets • Domains and hosting accounts • GitHub repositories • Deployment links • Meeting notes • Project requirements • Time logs and deadlines The problem isn't that we don't save this information. The problem is that we save it everywhere. -A Notepad file for credentials. -A spreadsheet for clients. -A project management tool for tasks. -Bookmarks for links. -Chat messages for "important" details. And before long, finding information takes more time than using it. After one too many "I know I saved this somewhere" moments, I decided to build something for myself. A single place where every project has its own secure workspace. Not just for storing passwords, but for managing everything related to that project: clients, credentials, API keys, notes, services, links, statuses, and time tracking. That's how "𝐏𝐫𝐨𝐮𝐥𝐭" started. So over the last few days, I've been building Proult, A local-first desktop application designed to keep everything related to a project in one place. -AES-encrypted credentials, API keys, and secrets -Project and client management -Built-in time tracking -Organization through project domains (Freelance, Personal, Organization, University) -Global search across projects, clients, credentials, and services -Full import/export support so your data always remains yours -Pinned projects, tags, notes, deployment links, and service management -Local-first architecture; no cloud dependency, everything stays under your control Still polishing it, but building it has already improved my own workflow significantly. Turns out, the best developer tools are often the ones built to solve your own frustrations first.

1

242

Cover image for Editorial Portfolio for an AI Engineer & Product Builder

Editorial Portfolio for an AI Engineer & Product Builder

1

0

Security Engineer(1)

Lahore, Pakistan

Google Workspace Certified Admin | Email Migration Expert

New to Contra

Google Workspace Certified Admin | Email Migration Expert

Cover image for Deleted Domain from Client's Google Workspace

Deleted Domain from Client's Google Workspace

0

30

Cover image for Wordpress Manual Site Tranfer With

Wordpress Manual Site Tranfer With Big Database files

0

20

Cover image for Helped Client with Wordpress Migration

Helped Client with Wordpress Migration

0

23

Cover image for Clients Google Workspace Complete Setup

Clients Google Workspace Complete Setup

0

33

Security Engineer(1)

Lahore, Pakistan

AI Solutions & Automation for Your Business

AI Solutions & Automation for Your Business

Cover image for Face + Fingerprint Door Unlock System

Face + Fingerprint Door Unlock System

0

2

Cover image for Three years ago, if someone

Three years ago, if someone had told me I'd be building AI Employees for businesses around the world, I probably wouldn't have believed them. Like many engineers, I started by building models. Training them. Testing them. Improving accuracy. But over time, I realized something important. Businesses don't wake up thinking: "I need AI." They wake up thinking: "How do I save time?" "How do I reduce costs?" "How do I get more customers?" "How do I stop missing opportunities?" That realization changed everything. Instead of building isolated AI tools, I started building AI Employees—intelligent digital teammates that quietly handle repetitive operations so people can focus on customers, strategy, creativity, and growth. That vision became Nexariza AI. Over the past months, we've built AI systems for: • Email communication • Customer calling • Marketing automation • Lead generation • CRM intelligence • AI-powered interviewing • Computer vision • Business intelligence But this video isn't really about software. It's about a belief. I believe the next generation of businesses won't be defined by how many people they hire. They'll be defined by how effectively people and AI work together. The companies that win won't replace human talent. They'll remove repetitive work so talented people can do what only humans can do—build relationships, solve problems, innovate, and create. This is the future we're building. One AI Employee at a time. I'd love to hear your perspective: What's one repetitive task in your work that you wish simply disappeared forever? The answers to that question may shape what we build next. #NexarizaAI #AIEmployees #AgenticAI #ArtificialIntelligence #FutureOfWork #Automation #BusinessTransformation #EnterpriseAI #Innovation #Founders #Startups #Technology

3

39

Cover image for Build AI Agents

Build AI Agents

0

9

Cover image for Detectra-AI main screen image

Detectra-AI main screen image

0

41

Security Engineer(1)

Lahore, Pakistan

Full-Stack Dev | React · Node.js · AI Apps

New to Contra

Full-Stack Dev | React · Node.js · AI Apps

Cover image for USB Encryptor — A security

USB Encryptor — A security system built with Python/Flask and AES-CBC encryption that protects USB drive files with password authentication. Features file encryption/decryption, brute-force protection with 30-second lockout after 3 failed attempts.

0

34

Cover image for EventSphere — A React-based event

EventSphere — A React-based event discovery platform with search functionality, category filters, and upcoming events listing.

0

30

Cover image for Pettaline — E-commerce flower shop

Pettaline — E-commerce flower shop built with HTML, CSS and JavaScript. Features include product listings, product detail pages, shopping cart, and responsive multi-page design.

0

38

Cover image for DineX — Food Delivery Web

DineX — Food Delivery Web App using Python/Flask. Included Dijkstra’s algorithm for optimized delivery routes and AVL trees for efficient data management.

0

42

Security Engineer(1)