Mubashraa Bashir

Cybersecurity and Ethical Hacking Practitioner - CEH Practical Labs

(2025-01)

Web Application Security and Vulnerability Assessment: Performed structured security assessments on demo and practices web applications, identifying vulnerabilities such as insecure weak uploads, weak authentication, misconfigurations and exposed directories. Utilized tools including Burp Suite, Nmap, Nikto and FFUF to analyze requests, map endpoints, test parameters, and detect OWASP vulnerabilities.

PoC findings and provided clear remediation guidance.

Network Scanning, Enumeration and Threat Analysis: Conducted network scanning and enumeration labs using Network Mapper, WHOIS and Hydra to identify open ports, services, weak credentials, and exposed network assets. Performed controlled Brute-Force testing in lab environments, analyzed service banners, and mapped system attack surfaces to strengthen defensive configurations. Also experienced with DNS and network reconnaissance techniques.
Server Security Posture Evaluation: Executed vulnerable scans on test servers and applications, validity results manually, and created professional reports with non-exploit PoC evidence. Prioritized risks based on severity, impact and exploitability, ensuring clarity and accuracy in assessment documentation aligned with CEH methodologies.
Proactive Security and Continuous Learning: Applied ethical hacking techniques across CEH modules including foot printing, scanning, enumeration, and system hacking (non-exploit). Developed a strong understanding of web security, secure configurations and risk mitigation strategies. Continuously practiced new tools, enhanced analytical skills and state updated with modern cyber threats and security based practices.

Red Teaming | SIEM Monitoring and Infrastructure Security - CEH Practical Labs

(2025-01)

Red Teaming, Reconnaissance and Enumeration: Conducted Passive and active reconnaissance using WHOIS, Subdomain Discovery, Service enumeration and credential testing. Simulated attacker techniques and mapped system attack surfaces to evaluate security controls.
SIEM Monitoring and threat detection: Used SIEM tools to analyze logs, detect anomalies, investigate alerts and identify indicated of compromise (IOCS). Strengthened detection accuracy through continuous monitoring and event correlation.
Firewall Configuration Network Security: Worked with firewall rules, ACLs, and Network segmentation, Analyzed traffic flaws, validity policies and applied best practices to reduce attack exposure and enhance network security.

About