Skip to content
View rayan-407's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report rayan-407

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
rayan-407/README.md

<

πŸ‘Ύ MUHAMMAD RAYAN

Cybersecurity Student | Aspiring Red Teamer | Security Researcher

Breaking systems to understand how they can be secured.

Profile Views


> cat about_me.txt

name: Muhammad Rayan
location: Gujranwala, Pakistan
education: BSCS @ University of the Punjab

career_focus:
  - Red Teaming
  - Penetration Testing
  - Ethical Hacking
  - Offensive Security

secondary_focus:
  - GRC
  - Security Policy
  - ISO 27001
  - Network Security

programming:
  - Python
  - C
  - C++

spoken_languages:
  - English
  - Urdu
  - Punjabi

current_status: Building practical cybersecurity experience

> ./experience.sh

πŸ’Ό The Arzens (TAS) β€” GRC Intern

Basic Track

Working with security governance and GRC concepts including:

  • Security Policy Review
  • ISO 27001 Annex A Mapping
  • Gap Analysis
  • Remediation Planning
  • Compliance Documentation
  • Security Governance

πŸ’Ό Decode Labs β€” Cybersecurity Intern

Internship Completed

Built practical exposure to cybersecurity concepts, technical security practices and professional security workflows.


> cat mission.txt

My mission is simple: understand how systems fail, learn how attackers think, and use that knowledge to make systems stronger.

I'm currently building my foundation toward a career in Red Teaming and Penetration Testing, combining programming, networking, Linux, vulnerability assessment and offensive-security methodology.


> ls cybersecurity/

πŸ”΄ Offensive Security

Nmap Metasploit Burp Suite Wireshark Hydra Nikto Kali Linux

  • Reconnaissance
  • Enumeration
  • Port Scanning
  • Vulnerability Assessment
  • Exploitation Fundamentals
  • Web Security Fundamentals
  • Penetration Testing Fundamentals

πŸ”΅ Defensive / Security

  • Security Awareness
  • Phishing Awareness
  • Detection & Response Fundamentals
  • Network Security
  • Threat & Vulnerability Fundamentals
  • Security Risk Management

🟣 GRC

  • Security Policy Review
  • ISO 27001
  • Annex A Mapping
  • Gap Analysis
  • Remediation Planning
  • Compliance Documentation

> ls programming/

Python    β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ
C         β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ
C++       β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ
Bash      β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ

Python is currently my primary language for cybersecurity tooling and automation.


> ls projects/

Project What I Built Focus
🧰 Security Lab Work Recon β†’ scanning β†’ enumeration β†’ controlled exploitation Red Team
πŸ“‹ Security Policy Review Policy analysis + ISO 27001 mapping + gap analysis GRC
πŸ›‘οΈ Vulnerability Scanner Python vulnerability detection tool Security
πŸ•΅οΈ Packet Sniffer Packet capture & analysis tool Networking
πŸ“‘ Port Scanner Custom TCP port scanner Recon
πŸ” Password Strength Checker Password security analysis Security
🎣 Phishing Awareness Scanner Phishing indicator detection Awareness
πŸ›οΈ Cyber Bureau Cybersecurity reporting/awareness workflow Cybersecurity
🌐 Portfolio Personal cybersecurity portfolio Professional

> cat training.log

Google Cybersecurity Professional Certificate

Studied:

  • Foundations of Cybersecurity
  • Security Risk Management
  • Networks & Network Security
  • Linux & SQL
  • Assets, Threats & Vulnerabilities
  • Detection & Incident Response
  • Python Automation for Cybersecurity
  • Cybersecurity Job Readiness

TryHackMe

Completed / studied:

  • Cyber Security Training / Introduction
  • Offensive Security Intro
  • Defensive Security Intro
  • Getting Started with Cisco Packet Tracer

Networking

  • Cisco Packet Tracer
  • Networking Fundamentals
  • CCNA-oriented learning

> cat lab.log

Environment:
    Kali Linux
    VMware
    Metasploitable2
    Vulnerable Lab Targets

Workflow:
    Reconnaissance
        ↓
    Scanning
        ↓
    Enumeration
        ↓
    Vulnerability Identification
        ↓
    Controlled Exploitation
        ↓
    Documentation
        ↓
    Remediation / Learning

All offensive-security experimentation is performed in controlled, authorized environments.


> cat achievements.log

[x] Completed Decode Labs cybersecurity internship
[x] Gained GRC internship experience at The Arzens
[x] Built multiple cybersecurity tools with Python
[x] Built a vulnerability scanner
[x] Built a packet sniffer
[x] Built a custom port scanner
[x] Built a password strength checker
[x] Built phishing-awareness tooling
[x] Completed security policy review project
[x] Practiced ISO 27001 Annex A mapping
[x] Completed TryHackMe cybersecurity training
[x] Practiced Cisco Packet Tracer
[x] Built a personal cybersecurity portfolio
[x] Developed practical Linux/security skills

> cat roadmap.log

[x] Cybersecurity Fundamentals
[x] Networking Fundamentals
[x] Linux Fundamentals
[x] Python Security Tooling
[x] Security Projects
[x] GRC / ISO 27001 Practice
[x] Decode Labs Internship
[x] TryHackMe Security Training
[~] Advanced Web Security
[~] Active Directory Lab
[~] Privilege Escalation
[ ] eJPT
[ ] CCNA
[ ] OSCP
[ ] Professional Red Team / Pentesting Role

> ./future.sh

goal = "RED TEAMER"

while goal:
    learn()
    build()
    lab()
    break_things_ethically()
    document()
    improve()

> cat philosophy.txt

Learn the technology. Understand the weakness. Think like the attacker. Defend like the professional.


> connect_with_me

πŸ™ GitHub: github.com/rayan-407 πŸ’Ό LinkedIn: linkedin.com/in/YOUR-LINKEDIN-HANDLE

> Access granted. Welcome to my lab.

Every project is another step toward becoming a better security professional.

Pinned Loading

  1. Phishing-Awareness-Analysis Phishing-Awareness-Analysis Public

    Real-world phishing email analysis using my own spam folder β€” Project 3 of my Cybersecurity

    3

  2. Cipher-bureau Cipher-bureau Public

    A part of encryption and de-cryption game.

    HTML 1

  3. Muhammad-rayan-Portfolio- Muhammad-rayan-Portfolio- Public

    My personal portfolio website β€” showcasing my cybersecurity journey, certifications, and projects

    HTML 1

  4. Password-strength-checker Password-strength-checker Public

    Python CLI tool that checks password strength and gives real security-based suggestions β€” Project 1 of my Cybersecurity Internship

    Python 1