v
v3cn4x00

Muhammad Arafat

@v3cn4x00

Penetration Tester and Web Developer

Pakistan
English
About me
I am a PNPT-certified Network Penetration Tester delivering practical, real-world security testing. I simulate real attacker behavior to identify vulnerabilities that matter. I perform external and internal network testing, manually validate findings, and provide clear security reports with actionable remediation guidance. All testing is conducted ethically, legally, and only with proper authorization.... Read more

Skills

v
v3cn4x00
Muhammad Arafat
Offline • 
Average response time: 1 hour

See my services

AI Websites & Software
I will build a custom ai web app with nextjs and ai integration
From$100 / projectMore details
Programming & Tech
I will perform penetration testing, vapt and security assessment
From$250 / projectMore details

Portfolio

Work experience

Penetration tester

Freelance • Self-employed

Nov 2024 - Present • 1 yr 9 mos

Conducted internal and external network penetration testing to evaluate organizational security posture against real-world attack scenarios. Performed reconnaissance, asset discovery, port scanning, and service enumeration on internet-facing infrastructure to identify exposed services and misconfigurations. Simulated internal threat scenarios by assessing lateral movement, weak credentials, insecure protocols, and privilege escalation opportunities within internal networks. Identified vulnerabilities related to outdated services, poor access controls, weak authentication, and improper network segmentation. Validated findings through controlled exploitation while maintaining strict scope and authorization boundaries. Documented findings in clear, professional penetration test reports, including risk ratings, impact analysis, and actionable remediation recommendations. Communicated technical findings in a simplified manner suitable for both technical teams and non-technical stakeholders. Tools & Skills: Nmap, Burp Suite, Metasploit (basic), Wireshark, Nessus/OpenVAS, Linux, TCP/IP, DNS, Active Directory fundamentals, vulnerability assessment, reporting