Freelancers using Docker in LahoreFreelancers using Docker in Lahore
ProjectsPeople
Ahmed Khan's avatar
Ahmed Khan
Lahore, Pakistan
Cybersecurity specialist with ability to identify flaws
New to Contra
Cybersecurity specialist with ability to identify flaws
Cover image for I simulated a real-world Active
I simulated a real-world Active Directory (AD) attack to identify and exploit misconfigurations within a Windows domain environment. The goal was to practice enumeration techniques, escalate privileges to domain admin, and establish persistent access. I started with LDAP enumeration using ldapsearch to map domain users and groups. Using BloodHound, I visualized attack paths and identified a Kerberoastable service account — a weak SPN tied to an outdated service. I extracted the hash using GetUserSPNs.py (http://GetUserSPNs.py) and cracked it with Hashcat, revealing the cleartext password. I then used Pass-the-Hash to authenticate as a domain admin using PsExec. To maintain persistence, I added a domain admin backdoor account using Mimikatz. Finally, I cleared event logs to avoid detection and exported a full attack report for remediation. Tools Used: ldapsearch, BloodHound, Hashcat, GetUserSPNs.py (http://GetUserSPNs.py), PsExec, Mimikatz, eventlog (for cleanup) Deliverable: Full attack timeline with screenshots, enumeration outputs, and security recommendations.
0
10
Cover image for I conducted a complete web
I conducted a complete web application security assessment on Damn Vulnerable Web Application (DVWA) using manual and automated testing techniques. The goal was to identify and exploit OWASP Top 10 vulnerabilities. I mapped the application using Burp Suite and discovered multiple injection points. I exploited SQL Injection to bypass authentication and extract sensitive data from the database using sqlmap. I also tested for Cross-Site Scripting (XSS) with custom payloads and successfully hijacked session cookies using document.cookie injection. I chained a file upload vulnerability with a PHP reverse shell to gain remote access to the server. All findings were documented with proof-of-concept screenshots and step-by-step remediation guidance. Tools Used: Burp Suite, sqlmap, OWASP ZAP, curl, custom payloads Deliverable: A detailed report including vulnerability exploitation steps, proof-of-concept, and mitigation strategies.
0
26
Cover image for I performed a complete network
I performed a complete network penetration test on a deliberately vulnerable Linux machine (Metasploitable2) to simulate a real-world attacker scenario. The objective was to identify exploitable services, gain initial access, escalate privileges to root, and extract sensitive data. I started with reconnaissance using nmap to discover open ports and services. I identified outdated and vulnerable services including vsftpd 2.3.4 and Samba 3.0.20. Using Metasploit, I exploited the vsftpd backdoor to gain initial shell access. I then used shell_to_meterpreter to upgrade my session to a Meterpreter shell, giving me greater control. I dumped password hashes from /etc/shadow and cracked them using John the Ripper. Finally, I escalated privileges to root using the Samba usermap_script exploit and documented the entire process with screenshots. Tools Used: nmap, Metasploit, Meterpreter, John the Ripper, searchsploit Deliverable: A comprehensive report including attack timeline, exploited CVEs, and remediation recommendations.
0
24
Cover image for I discovered a stored cross-site
I discovered a stored cross-site scripting (XSS) vulnerability in a practice web application's comment section that allowed me to inject malicious JavaScript that would execute in any user's browser. By submitting a comment containing a script payload, I successfully stole session cookies from other users and could have hijacked their accounts, performed actions on their behalf, or defaced the website. This finding was documented in a comprehensive report including proof-of-concept screenshots showing cookie theft, CVSS risk scoring of 6.5 (Medium), and step-by-step remediation guidance including input sanitization and output encoding. This assessment demonstrates my ability to find client-side vulnerabilities that can compromise every user visiting the site.
0
52
Docker(3)
Waleed Ashraf Usmani's avatar
Waleed Ashraf Usmani
Lahore, Pakistan
Fractional CTO | B2B SaaS & AI Architecture, US/UK Founders
5.0
Rating
4
Followers
Fractional CTO | B2B SaaS & AI Architecture, US/UK Founders
Cover image for Multi-Tenant Operations Suite
Multi-Tenant Operations Suite
0
4
Cover image for HealthSync Care
HealthSync Care
0
4
Cover image for Workforce & HR Operations Hub
Workforce & HR Operations Hub
0
9
Cover image for AI Workflow Automation Suite
AI Workflow Automation Suite
0
4
Docker(2)
Muhammad Luqman's avatar
Muhammad Luqman
proLahore, Pakistan
Helping Startups & SMBs to build Scalable, Impactful Product
6
Followers
Helping Startups & SMBs to build Scalable, Impactful Product
Cover image for Financial Accounting Assistant – SaaS Web Application
Financial Accounting Assistant – SaaS Web Application
0
0
Cover image for QuoteSmith
QuoteSmith
0
4
Cover image for Development of Healing Mosaic Emotional Well-being App
Development of Healing Mosaic Emotional Well-being App
0
2
Cover image for YouTube Influencer Analytics & Automation Platform
YouTube Influencer Analytics & Automation Platform
0
3
Docker(1)
Muzzammil Hussain's avatar
Muzzammil Hussain
Lahore, Pakistan
Full-Stack & AI Engineer · PropTech, Real Estate & B2B SaaS
9
Followers
Full-Stack & AI Engineer · PropTech, Real Estate & B2B SaaS
Cover image for DealLens AI. AI-Powered Valuation & Comps for Investors
DealLens AI. AI-Powered Valuation & Comps for Investors
0
3
Cover image for Estatewise. Marketing Site & Brand System
Estatewise. Marketing Site & Brand System
0
3
Cover image for Estatewise. Real Estate CRM with AI Follow-Ups
Estatewise. Real Estate CRM with AI Follow-Ups
0
6
Cover image for OpsAgent. AI Workflow Gallery & Run Visualizer
OpsAgent. AI Workflow Gallery & Run Visualizer
0
3
Docker(1)
Abdul Mannan's avatar
Abdul Mannan
Lahore, Pakistan
Senior AI Engineer & Full Stack Architect
New to Contra
Senior AI Engineer & Full Stack Architect
Cover image for Banking App — OAuth2 & Microservices Migration
Banking App — OAuth2 & Microservices Migration
0
1
Cover image for Financial Data & Analysis Platform (Bucs)
Financial Data & Analysis Platform (Bucs)
0
0
Cover image for AI-Powered Recruitment ATS Platform
AI-Powered Recruitment ATS Platform
0
2
Cover image for Dubai Awards & Nominations Platform
Dubai Awards & Nominations Platform
0
1
Docker(1)
Ali Mardan's avatar
Ali Mardan
Lahore, Pakistan
Full-Stack (Next.js/Go) building scalable, AI-driven CMS
New to Contra
Full-Stack (Next.js/Go) building scalable, AI-driven CMS
Cover image for Engineered a high-performance headless platform
Engineered a high-performance headless platform for B1 Properties, combining a customized Strapi CMS with a blazing-fast frontend built to showcase luxury real estate listings dynamically and securely. Execution & Business Impact Zero-Bottleneck Content Management: Customized a structured Strapi backend, empowering non-technical marketing teams to instantly update ultra-luxury property listings and agent profiles with zero developer dependency. Premium UX & Media Optimization: Implemented automated image optimization and lazy-loading pipelines, ensuring massive, high-fidelity property assets load instantly without degrading performance or SEO scores. Scalable API Architecture: Built low-latency, secure API endpoints for smooth data fetching between the CMS and presentation layer to handle high-traffic property inquiries seamlessly.
0
26
Cover image for Paradise Tick's is a fully
Paradise Tick's is a fully functional online retail store specializing in premium men's and women's watches. The project features a robust, custom-built admin panel designed to streamline the client's e-commerce operations, inventory management, and store customization. Key Features & Technical Highlights: * Custom Admin Dashboard: A user-friendly interface to manage orders, product catalogs, categories, and automated emails. * Dynamic Storefront Control: Built-in tools to manage home page sections, promotional banners, and sliders directly from the dashboard. * Optimized Asset Delivery: Integrated with Cloudflare R2 Storage for highly scalable, cost-effective, and blazing-fast product image hosting. * Bulk Inventory Management: Supports CSV import/export functionality to quickly add or update hundreds of products and prices at once.
0
8
Cover image for Huntme Links is an administrative
Huntme Links is an administrative affiliate and partner management platform designed to track performance, manage payouts, and oversee multi-user networks within the HuntMe lead-generation and B2B software ecosystem. The dashboard provides a centralized interface for system administrators to monitor real-time financial metrics, such as total commissions, sales volumes, and transaction counts, while handling multi-tenant access control for registered partners. It features dedicated tracking for active marketing properties, handles automated billing and payment workflows, and streamlines the partner onboarding process via an integrated application pipeline to scale affiliate network operations efficiently.
0
18
Cover image for Optimizing Trading Platform Frontend Performance
Optimizing Trading Platform Frontend Performance
0
0
Docker(1)
Muhammad Hamza's avatar
Muhammad Hamza
Lahore, Pakistan
🚀4+ Years Experience: Senior software engineer
🚀4+ Years Experience: Senior software engineer
Cover image for Development of Researgent AI IDE
Development of Researgent AI IDE
0
7
Cover image for Fetch for LLMs: Transforming Webpages for AI
Fetch for LLMs: Transforming Webpages for AI
0
4
Cover image for AI-Powered Messaging Engine Development
AI-Powered Messaging Engine Development
0
6
Cover image for PioSphere Cloud Infrastructure for AI
PioSphere Cloud Infrastructure for AI
0
5
Docker(1)