Muhammad Junaid Akhtar | Jr Penetration Tester

junaid@Jr-penetration-tester: ~

$ whoami

MUHAMMAD JUNAID AKHTAR

> Jr Penetration Tester | Web Security Researcher

$ ./view_portfolio.sh --all

[*] Loading portfolio data...
[+] Strong focus on Web Security & CTFs
[+] Actively improving offensive security skills

cat about.md

Junior Penetration Tester with hands-on experience in web application security, penetration testing labs, and CTF challenges. Currently pursuing Bachelor of Science at Riphah International University, Islamabad.

Skilled in identifying and exploiting OWASP Top 10 vulnerabilities with practical focus on web application penetration testing, vulnerability assessments, and security testing of real-world applications. Hands-on experience includes conducting web-based attack simulations, testing for injection flaws, authentication bypasses, and performing ethical hacking engagements.

Ranked in the Top 3% globally on TryHackMe with 50+ completed labs and learning paths. Multiple-time CTF champion with 1st place at Riphah University CTF 2025 and 2nd place at Islamia University of Bahawalpur CTF.

ls -la /experience/

Cybersecurity Intern

Inara Technologies | Onsite | Jun 2025 - Present

Performing ongoing penetration testing and vulnerability assessments of company projects and internal systems
Security testing of the company's official website including OWASP Top 10 assessment, auth testing, and business logic flaws
Conducting network security assessments including port scanning, service enumeration, and identifying misconfigurations
Documenting findings and delivering detailed penetration testing reports with remediation recommendations

Security Intern

Digital Empowerment Network | Remote | Jun 2025 - Aug 2025

Performed vulnerability assessments on internal web applications, identifying and documenting OWASP Top 10 weaknesses
Conducted security testing of organization's web assets including input validation, session management, and access control flaws
Carried out network reconnaissance and enumeration to map internal infrastructure and detect exposed services
Delivered structured security reports with risk ratings and actionable remediation steps for development teams

cat /education/training.log

B.S. in Cybersecurity

Riphah International University, Islamabad | 2023 - Present

Focus on network security, ethical hacking, and web application security
Active member of the university's cybersecurity club
1st place — Riphah University CTF 2025

Platform Training & Labs

September 2024 - Present

Hackviser — Top 1%, 40+ Warmups & Scenarios completed
TryHackMe — Top 3% globally, 50+ labs and learning paths
Active CTF participation across multiple platforms and daily challenges

cat /etc/skills.conf

[ WEB PENTESTING ]

XSS, SQLi

LFI / RFI

Auth & Authz Bypass

IDOR

JWT Attacks

[ RED TEAM ]

Linux Priv Escalation

AD Enumeration

Attack Chaining

[ SECURITY TOOLS ]

Burp Suite

Nmap

BloodHound

SQLmap

[ SECURITY ANALYSIS ]

Vuln Assessment

CTF & Lab Exploitation

Web Red Team

Penetration Testing

git log --projects

Honeypot Development

Designed and deployed honeypot system to detect and analyze unauthorized access attempts with real-time threat intelligence.

Network Security Threat Detection Linux

URL Blacklisting System

C++ system using Binary Search Tree for fast malicious URL lookup and history tracking.

C++ Data Structures Security

Brute-Force Detection

Python web system to detect repeated failed login attempts and mitigate brute-force attacks.

Python Web Security Authentication

[+] View all projects on GitHub →