███████╗██╗  ██╗███████╗██╗  ██╗███████╗███████╗ ██████╗
 ██╔════╝██║  ██║██╔════╝██║  ██║██╔════╝██╔════╝██╔════╝
 ███████╗███████║█████╗  ███████║███████╗█████╗  ██║
 ╚════██║██╔══██║██╔══╝  ██╔══██║╚════██║██╔══╝  ██║
 ███████║██║  ██║███████╗██║  ██║███████║███████╗╚██████╗
 ╚══════╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝ ╚═════╝

---

$ whoami

┌──(ShehSec㉿kali)-[~/]
└─$ cat identity.json

{
  "name"       : "Shehzad Ali",
  "alias"      : "ShehSec",
  "role"       : "Cybersecurity Engineer",
  "teams"      : ["🔴 Red", "🔵 Blue", "🟣 Purple"],
  "location"   : "🇵🇰 Pakistan",
  "experience" : "4+ yrs offensive | 2+ yrs industry",
  "education"  : "BS CS — Hazara University (3.54 GPA)",
  "cve"        : "CVE-2025-24966 — reNgine Project",
  "bounties"   : "HackerOne — Active Researcher",
  "status"     : "[+] Always Hacking... ethically."
}

---

$ cat /etc/attack_surface

🔴 RED TEAM Offensive Security [+] Web App Pentesting OWASP Top 10 SQLi · XSS · SSRF · RCE Business Logic Flaws [+] API Security REST · GraphQL JWT · OAuth · IDOR Mass Assignment [+] Mobile Security Android & iOS RE Runtime Analysis [+] Active Directory Kerberos Attacks Lateral Movement Privilege Escalation [+] Desktop App Security Binary Exploitation Reverse Engineering

🔵 BLUE TEAM Defensive Security [+] SOC Operations SIEM Fundamentals Log Analysis & Triage [+] DFIR Digital Forensics Incident Response [+] Threat Hunting Detection Engineering Behavioral Analysis [+] Vuln Management Secure Coding Compliance Hardening [+] Govt Infrastructure KPITB — Secured Gov Digital Assets

🟣 PURPLE TEAM Hybrid & Research [+] Cloud Security AWS · Azure IAM Abuse Misconfigurations [+] AI/LLM Security Prompt Injection Data Leakage Model Exploitation [+] Red Team Simulations Full Attack Chains Detection Testing [!] Researching IoT Security Web3 / Blockchain Post-Quantum Crypto

---

$ ls ~/tools/ --color

---

$ cat experience.log

[2024 → NOW ]  🔴 Cybersecurity Researcher | Penetration Tester
               Secure Purple · Islamabad, Pakistan
               → Assessments: Web · Mobile · API · Cloud · AI/LLM · Desktop
               → Manual pentesting + emerging threat research

[2024 → 2025]  🔵 Security Engineer Intern
               KPITB — Khyber Pakhtunkhwa IT Board · Peshawar
               → VAPT for government digital infrastructure
               → System hardening + compliance security improvements

[2023 → NOW ]  🟣 Penetration Tester (Contract)
               OffensioX · Islamabad
               → VAPT & Red Team engagements
               → Attack simulation + detection/response evaluation

[2021 → NOW ]  🟢 Security Researcher — Bug Bounty
               HackerOne · Remote / USA
               → Critical vulnerability disclosure for global orgs
               → Logic flaws · Misconfigs · Novel exploitation vectors

---

$ ls -la certifications/

🎖️	Cert	Full Name	Status
🎯	CEH	Certified Ethical Hacker — EC-Council	✅
🔓	eCPPTv3	Certified Professional Penetration Tester	✅
🌐	eWPTXv3	Web App Penetration Tester eXtreme	✅
🔌	ASCP	API Security Certified Professional	✅
📱	CAPen	Certified AppSec Pentester	✅
🔑	CASA	Certified API Security Analyst	✅
🛡️	Google	Cybersecurity Professional	✅

---

$ ./projects --verbose

projects = {
    "XSS-Finder": {
        "type": "🔴 Offensive Tool",
        "desc": "CLI — automated XSS detection for bug bounty hunting",
        "tech": ["Python", "Requests", "Payload Testing"],
    },
    "Blind-XSS-Headers": {
        "type": "🔴 Offensive Tool",
        "desc": "Blind XSS via HTTP header payload injection automation",
        "tech": ["Python", "HTTP Manipulation"],
    },
    "Vuln-Assessment-Tool": {
        "type": "🟣 Research / FYP-2024",
        "desc": "Python scanner — SQLi, XSS & misconfiguration detection",
        "tech": ["Python", "SQLi", "XSS", "Remediation Suggestions"],
    },
}

---

$ cat achievements.txt

🏆 [2024] Finalist ── BlackHat MEA Cybersecurity CTF ── Riyadh, Saudi Arabia
🏆 [2024] Finalist ── Digital Pakistan Cyber Security Hackathon
🏆 [2023] Finalist ── NCCS Hackathon
🏆 [2023] Finalist ── Ignite Cyber Security Hackathon
💀 [2025] CVE Contributor ── CVE-2025-24966 (reNgine Project)

CVE-2025-24966 — Responsible disclosure in reNgine open-source recon framework. Real research, real impact. 🎯

---

$ neofetch --stats

---

$ ping ShehSec

PING ShehSec ([email protected])
64 bytes: icmp_seq=1 — Open to pentesting gigs, red team collabs & bug bounty. 🤝

╔══════════════════════════════════════════════════════════════════╗
║   🔴 Attack.   🔵 Defend.   🟣 Dominate.  — The ShehSec Way.   ║
╚══════════════════════════════════════════════════════════════════╝

_{⚡ All activities are authorized & ethical · Built with ☕ & terminal sessions}