Ethical Hacking
Manual testing, validation, and exploitation analysis across web, infrastructure, and system exposure.
Full-stack self-hosted server combining real-time system monitoring, WebRTC/HLS CCTV streaming, WiFi reconnaissance, and AWS S3 / GCS cloud bucket scanning into a unified control panel.
Modular Python intelligence engine deployed to 450+ users for breach detection, threat artifact correlation, social media reconnaissance, and lawful business ownership lookups.
Responsible disclosure of critical XSS & Open Redirects in YouTube (Google Dragon Badge) and Bugcrowd. Uncovered misconfigurations across 5 firms, safeguarding 1.14 TB of sensitive financial data.
Independently redesigned and deployed the Pakistan Amateur Radio Society web presence, advancing amateur radio communications, RF technology exploration, and SIGINT-oriented analysis.
Manual testing, validation, and exploitation analysis across web, infrastructure, and system exposure.
Structured collection and correlation across public data sources, breach intelligence, and reconnaissance workflows.
Turning noisy indicators into meaningful security context, risk assessment, and actionable insight.
Self-hosted tooling for monitoring, workflow automation, and practical security operations.
Identify exposed assets, public-facing signals, and operational surfaces before they become material exposure risks.
Cross-check public indicators, correlate weak signals, and separate noise from legitimate security findings.
Validate misconfigurations, exploit paths, and business logic flaws through careful manual testing and evidence-based analysis.
Convert findings into clean, actionable reports and coordinate responsible disclosure with the relevant parties.
TBV Bot
Misconfiguration mitigation
Ethical hacking, OSINT, research
For urgent engagement requests
Responsible disclosure recognition for critical web vulnerabilities that improved security posture and prevented sensitive exposure.
An OSINT automation platform built for breach detection, reconnaissance, and digital intelligence workflows at meaningful scale.
Built a local-first operations platform integrating system telemetry, CCTV streaming, wireless scanning, cloud storage audits, and HTTP request replication.
Led the redesign of the organization's web presence while continuing security research, RF exploration, and SIGINT-oriented analysis.
I work on vulnerability research, digital exposure analysis, OSINT-driven investigations, and security consulting for teams that want practical, high-signal outcomes.
Joint work on exposure analysis, OSINT workflows, and practical security investigations with clear research objectives.
Responsible vulnerability research and coordinated disclosure for teams that need reliable, evidence-based remediation.
Structured intelligence gathering across public-facing systems, infrastructure, and threat-related public signals.
Technical advisory, exposure review, and security guidance for organizations that need stronger real-world visibility.