Usama Rasheed
Web security expert & pentesting specialist.
New to Contra
Usama is ready for their next project!
🚨 Vulnerability Spotlight: OS Command Injection
⚠️ The Flaw: Unsanitized input in a "Ping Device" feature allowed arbitrary command execution directly on the server shell.
🕵️♂️ The Exploit (via Burp Suite):
Instead of a normal IP, I injected shell metacharacters: 127.0.0.1; cat...
Emergency recovery and malware removal for a compromised website, transforming it from a hacked state to a fully secured, hardened, and operational platform.
The Project Overview
Traditional rule-based phishing detection mechanisms struggle to keep up with modern cyber threats. To solve this, I engineered PhishX, an intelligent, AI-driven sandbox capable of analyzing and classifying malicious URLs in real-time.
How the AI Works
The...
A snapshot of a recent Web Application Security Assessment. This report details critical and medium-risk vulnerabilities identified during deep-level penetration testing, along with a complete remediation roadmap to secure the application against future attacks.
