Penetration Tester
Security Enthusiast
Crafting a Secure and User-Centric Digital Tomorrow
LET'S Connect!CERTIFICATION
COMPANIES
SECURED
Touseef Ahmed here, a highly motivated and diligent 4th-year Computer Science Engineering student specializing in Cyber Security. With hands-on experience in penetration testing methodologies and tools, I have a proven track record of identifying and mitigating security vulnerabilities through coursework, projects, and real-world bug bounty hunting and CTF challenges. My journey in cybersecurity has equipped me with practical skills and a deep understanding of various attack vectors and defense mechanisms.
I am passionate about continuously learning and staying updated with the latest advancements in the field. Beyond academics, I engage in CTF competitions to sharpen my skills and enjoy solving complex security challenges.
Join me in exploring the exciting world of cybersecurity, where we can learn, grow, and make the digital world a safer place together!
Perfect solutions for digital experience
Performed a thorough security assessment of DBS's CMS, identifying multiple misconfigurations and vulnerabilities. Exploited these weaknesses to gain administrative access, demonstrating a deep understanding of CMS security and the ability to proactively secure systems against potential threats.
Conducted an in-depth security review of DPG Media’s software infrastructure, uncovering a critical access control vulnerability. Successfully bypassed unauthorized access restrictions, After reporting to the company I was again able to get the sensitive content through REST api leading to bypass for the patch which was implemented.
Investigated an S3 bucket misconfiguration that led to the exposure of Personally Identifiable Information (PII), the S3 bucket was disclosed through a JavaScript file. Reported and rectified the data leakage issue, showcasing my expertise in cloud security and data protection to ensure compliance and privacy.
Identified a stored Cross-Site Scripting (XSS) vulnerability in Dstny’s application that could lead to an account takeover. Where I was able to execute through a file upload method and therfore leading to Stored XSS, demonstrating my skill in securing web applications and protecting user accounts from exploitation.
PHP • Python • Bash • C++ • Javascript • Jquery
Threat Detection • Network Security • Cybersecurity Architecture • Ethical Hacking • Social Engineering • Cloud Security • IT Audit • IT Security Assessments • Penetration Testing
HTML • Cascading Style Sheets (CSS) • JavaScript • PHP • Full-Stack Development • Front-End Development
Amazon Web Service (AWS) • Computer Science • Software Development • Project Management • Engineering • Communication • Training • Leadership • Customer Service • Microsoft Office
