Meerjada Altamas's Work | ContraWork by Meerjada AltamasMeerjada Altamas
AI Security | AppSec | Pentest | Red Team | Automation
AI-powered penetration testing project demonstrating automated vulnerability discovery, safe validation, evidence collection, and security report generation. Project Title
AI-Powered Autonomous Penetration Testing
Project Description
This project demonstrates an AI-assisted penetration testing workflow conducted in a fictional and authorized lab environment. The AI security agent automates attack-surface discovery, analyzes application behavior, identifies potential vulnerabilities, and supports safe validation without performing destructive actions.
The demonstration covers the complete security-testing lifecycle:
AI-powered reconnaissance and endpoint discovery
Automated web vulnerability identification
Safe validation using controlled test accounts
Attack-path and business-impact analysis
Sanitized evidence collection
CVSS-based severity assessment
Automated penetration-testing report generation
Remediation and manual verification guidance
The project illustrates how AI and security automation can help penetration testers reduce repetitive work, organize evidence, prioritize risks, and produce consistent reports while retaining human oversight for validation and final decisions.
Skills Demonstrated
AI Security
Web Application Penetration Testing
Application Security
Vulnerability Assessment
Attack-Surface Analysis
Burp Suite
Kali Linux
OWASP Top 10
CVSS Risk Assessment
Security Automation
Technical Security Reporting Developed an AI-powered security automation workflow for web application penetration testing, including automated vulnerability discovery, safe PoC validation, evidence collection, attack-path analysis, and generation of detailed HTML security reports with remediation recommendations. Project Title
Web Application Penetration Testing | SQL Injection & Security Assessment
Project Description (Copy & Paste to Contra)
This project demonstrates a simulated web application penetration testing assessment focused on identifying critical security vulnerabilities and understanding their potential impact on application security.
The demonstration follows a realistic attack scenario in an authorized lab environment, showing how a SQL injection vulnerability could lead to unauthorized administrative access, sensitive database exposure, and application compromise.
Key Areas Covered
Web Application Penetration Testing: Identifying and assessing application security vulnerabilities.
SQL Injection Testing: Demonstrating SQL injection risks in authentication functionality.
Authentication & Authorization: Evaluating potential unauthorized administrative access.
Database Security: Understanding sensitive data exposure risks.
Privilege Escalation: Demonstrating the potential impact of elevated access.
Persistence Risk Assessment: Highlighting security risks following an application compromise.
Security Reporting: Communicating vulnerabilities, risks, and potential business impact.
Technologies & Skills
Burp Suite
Web Application Security
OWASP Top 10
SQL Injection
Penetration Testing
Vulnerability Assessment
Ethical Hacking
Security Risk Analysis
My Role
Application Security Engineer | Penetration Tester | Cybersecurity Consultant