Marrij Ali Khan

Passionate and detail-oriented Penetration Tester and Bug Bounty Hunter with hands-on experience in identifying and exploiting security vulnerabilities in web applications. Recognized in the Microsoft and NASA Hall of Fame for responsible disclosure of security vulnerabilities. Skilled in web application security testing, vulnerability assessment, network enumeration, exploitation, and offensive security methodologies.

Actively advancing practical penetration testing skills through the Hack The Box Penetration Tester Path, with strong exposure to Active Directory security, network exploitation, web attacks, pivoting, tunneling, and password attacks. Experienced with industry-standard offensive security tools including Burp Suite, Metasploit, Nmap, SQLMap, and CrackMapExec.

Bug Bounty Hunter - Bugcrowd

(2024-05)

• Performed security testing on web applications through responsible disclosure and bug bounty programs.
• Identified and reported vulnerabilities affecting major organizations including Microsoft and NASA.
• Successfully discovered vulnerabilities related to authentication flaws, injection attacks, misconfigurations, and web application security weaknesses.
• Earned recognition in Microsoft Hall of Fame and NASA Hall of Fame for responsible vulnerability disclosures.
• Conducted reconnaissance, enumeration, manual testing, and proof-of-concept exploitation on target applications.
• Utilized Burp Suite, SQLMap, FFUF, and custom methodologies to identify attack surfaces and vulnerabilities.

Bachelors of Science - Cyber Security - Air University Kamra Campus (2024-09 - 2028-06)