Muhammad Ahmad

Cybersecurity Researcher & Ethical Hacking Practitioner

Sep 2022 - Present • 3 yrs 10 mos

Conducted practical cybersecurity research including network service exploitation, vulnerability assessment, and incident analysis. Configured and attacked services (FTP via vsftpd, DVWA) using Kali Linux tools — Nmap, Hydra, Metasploit. Demonstrated SQL injection, XSS, command injection, file upload exploitation, and CVE-based attacks (CVE-2011-2523). Performed log analysis and forensic documentation. Analyzed real-world threat campaigns (Clop MOVEit, 3CX supply chain, Volt Typhoon) using the MITRE ATT&CK framework and proposed mitigation strategies.

CTF Competitor & Bug Bounty Hunter

Jun 2022 - Present • 4 yrs 1 mo

Actively participate in national and international Capture The Flag (CTF) competitions, achieving 2nd Position at Tech Jam (Pak Austria Fachhochschule KPK), 3rd Position at CyberFest 2025 (FAST University), 1st Position at BCT CTF 2025 & 2026, and 2nd Position at CHC CTF 2025 — consistently placing as top individual scorer. Competitions covered Web Penetration Testing, Digital Forensics, Incident Response, Cryptography, and Cloud Security. Additionally engaged in Bug Bounty hunting with responsible disclosure reports submitted on YesWeHack for in-scope targets.