Skip to content
View MaheenRizwan23's full-sized avatar

Block or report MaheenRizwan23

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
MaheenRizwan23/README.md

README.md

Mahin — Offensive Security Practitioner

TLP:CLEAR — live engagement status

Portfolio LinkedIn Email views

§00 Executive Summary

Field Detail
Name Maheen Rizwan
Role Cybersecurity Undergraduate & Offensive Security Practitioner
Institution Abdul Wali Khan University Mardan (AWKUM), Pakistan
Council Female Coordinator, Technology & Innovation Society (AWKUM Students Council)
Rank TryHackMe — Global Top 5%, 100+ labs completed

§01 Rules of Engagement

Target Type Engagement Type
Web applications Penetration testing
Active Directory environments Exploitation & lateral movement
Internal / external networks Reconnaissance
General infrastructure Vulnerability assessment

§02 Methodology

Methodology: reconnaissance, enumeration, exploitation, Active Directory

Foundation — Python C C++ Linux Git SQLite Apache

§03 Exhibits

Exhibit A — Acheron CLASSIFICATION: PUBLIC · STACK: PYTHON

AI-powered web reconnaissance engine — automates target enumeration and surface mapping so the recon phase of an engagement starts from a triaged shortlist, not a blank scope.

Exhibit B — Host-Based FIM CLASSIFICATION: PUBLIC · STACK: PYTHON, SQLITE

Custom file integrity monitor — baselines watched paths, persists state to SQLite, and flags drift the moment a monitored file changes.

Exhibit C — Active Directory Lab CLASSIFICATION: PUBLIC · STACK: BLOODHOUND, IMPACKET, NETEXEC

Self-built domain lab covering initial access and lateral movement — enumeration, credential handling, and attack-path analysis end to end.

Exhibit D — PKI & Apache Hardening Lab CLASSIFICATION: PUBLIC · STACK: APACHE, LINUX

Certificate authority deployment paired with Apache configuration hardening and TLS enforcement — the defensive counterpart to the offense above.

§04 Telemetry

GitHub stats Streak Contribution graph

§05 Secure Channel

mahin@awkum:~$ ssh -i contact.key mahin@secure

[+] key exchange complete
[+] channel encrypted — session established
[+] distribution: TLP:CLEAR — open to internships,
    red team collaboration, CTF squads, research

mahin@awkum:~$ _

Portfolio LinkedIn Email



"Understand the network baseline, exploit the visibility gaps, then script the fix."

DOC // OFFENSIVE-SECURITY-PROFILE · TLP:CLEAR · DISTRIBUTION: UNLIMITED

Popular repositories Loading

  1. portfoilo portfoilo Public

    portfolio

    HTML

  2. SQL-Vulnerable-website SQL-Vulnerable-website Public

    Its a small project to know how websites are made intestinally vulnerable .

    Python

  3. SQL-vulnrable-Python-flask SQL-vulnrable-Python-flask Public

    HTML

  4. Hollywood Hollywood Public

    Shell

  5. shanon shanon Public

  6. Acheron Acheron Public

    Python