Zawar Ahmed

Motivated and detail-oriented BS Information Technology student with hands-on experience in penetration testing, vulnerability assessment, and web application security. Skilled in tools such as Burp Suite, SQLMap, and Kali Linux through practical training and internship experience. Passionate about cybersecurity, ethical hacking, and secure software development.

Penetration Tester at Ebrix pvt ltd

• Performed web application penetration testing in controlled lab environments.
• Identified and analyzed vulnerabilities including XSS, SQL Injection, CSRF, SSRF, and Command Injection.
• Used security tools such as Burp Suite, SQLMap, Nmap, and Kali Linux.
• Conducted information gathering, scanning, enumeration, and vulnerability assessment activities.
• Learned and applied concepts from the OWASP Top 10 and responsible disclosure practices.

Certified Ethical Hacking (CEH) Training at Corvit Systems

• Completed practical training in ethical hacking and cybersecurity fundamentals.
• Worked on network scanning, reconnaissance, vulnerability assessment, and basic exploitation techniques in lab environments.
• Gained hands-on experience with tools including Wireshark, Metasploit, Nmap, and Ettercap.
• Learned concepts related to network security, web application security, and penetration testing methodologies.
• Performed security testing exercises in virtual lab environments using Kali Linux.

Offensive Security Research

• Conducted offensive security research by developing python-based Command and Control (C2) framework, utilizing Telegram, Discord and GitHub APIs to study covert communication techniques and detection evasion methods.
• Researched how legitimate cloud platforms and trusted API Traffic may be abused by attackers to bypass traditional SIEM detections, network signatures, and security monitoring solutions.
• Evaluated detection engineering strategies and recommended defensive improvements for identifying suspicious activity hidden within legitimate encrypted traffic channels.

WordPress Security

• Configuring Cloudflare for Website Domain
• WordPress Wordfence Firewall configurations
• WordPress website performance Optimization
• SQL injection preventions
• XSS Prevention
• Email Spam Protection
• Security Headers
• Zero Trust Policy
• SSL Encryption
• DNSSEC
• 2-Factor Authentication
• Brute Forcing Protection

Bachelors in IT – Foundation University

Intermediate – KIPS College

Matriculation – Federal Board