<
Breaking systems to understand how they can be secured.
name: Muhammad Rayan
location: Gujranwala, Pakistan
education: BSCS @ University of the Punjab
career_focus:
- Red Teaming
- Penetration Testing
- Ethical Hacking
- Offensive Security
secondary_focus:
- GRC
- Security Policy
- ISO 27001
- Network Security
programming:
- Python
- C
- C++
spoken_languages:
- English
- Urdu
- Punjabi
current_status: Building practical cybersecurity experienceBasic Track
Working with security governance and GRC concepts including:
- Security Policy Review
- ISO 27001 Annex A Mapping
- Gap Analysis
- Remediation Planning
- Compliance Documentation
- Security Governance
Internship Completed
Built practical exposure to cybersecurity concepts, technical security practices and professional security workflows.
My mission is simple: understand how systems fail, learn how attackers think, and use that knowledge to make systems stronger.
I'm currently building my foundation toward a career in Red Teaming and Penetration Testing, combining programming, networking, Linux, vulnerability assessment and offensive-security methodology.
Nmap Metasploit Burp Suite Wireshark Hydra Nikto Kali Linux
- Reconnaissance
- Enumeration
- Port Scanning
- Vulnerability Assessment
- Exploitation Fundamentals
- Web Security Fundamentals
- Penetration Testing Fundamentals
- Security Awareness
- Phishing Awareness
- Detection & Response Fundamentals
- Network Security
- Threat & Vulnerability Fundamentals
- Security Risk Management
- Security Policy Review
- ISO 27001
- Annex A Mapping
- Gap Analysis
- Remediation Planning
- Compliance Documentation
Python ββββββββββββββββββββ
C βββββββββββββββ
C++ βββββββββββββββ
Bash βββββββββββ
Python is currently my primary language for cybersecurity tooling and automation.
| Project | What I Built | Focus |
|---|---|---|
| π§° Security Lab Work | Recon β scanning β enumeration β controlled exploitation | Red Team |
| π Security Policy Review | Policy analysis + ISO 27001 mapping + gap analysis | GRC |
| π‘οΈ Vulnerability Scanner | Python vulnerability detection tool | Security |
| π΅οΈ Packet Sniffer | Packet capture & analysis tool | Networking |
| π‘ Port Scanner | Custom TCP port scanner | Recon |
| π Password Strength Checker | Password security analysis | Security |
| π£ Phishing Awareness Scanner | Phishing indicator detection | Awareness |
| ποΈ Cyber Bureau | Cybersecurity reporting/awareness workflow | Cybersecurity |
| π Portfolio | Personal cybersecurity portfolio | Professional |
Studied:
- Foundations of Cybersecurity
- Security Risk Management
- Networks & Network Security
- Linux & SQL
- Assets, Threats & Vulnerabilities
- Detection & Incident Response
- Python Automation for Cybersecurity
- Cybersecurity Job Readiness
Completed / studied:
- Cyber Security Training / Introduction
- Offensive Security Intro
- Defensive Security Intro
- Getting Started with Cisco Packet Tracer
- Cisco Packet Tracer
- Networking Fundamentals
- CCNA-oriented learning
Environment:
Kali Linux
VMware
Metasploitable2
Vulnerable Lab Targets
Workflow:
Reconnaissance
β
Scanning
β
Enumeration
β
Vulnerability Identification
β
Controlled Exploitation
β
Documentation
β
Remediation / Learning
All offensive-security experimentation is performed in controlled, authorized environments.
[x] Completed Decode Labs cybersecurity internship
[x] Gained GRC internship experience at The Arzens
[x] Built multiple cybersecurity tools with Python
[x] Built a vulnerability scanner
[x] Built a packet sniffer
[x] Built a custom port scanner
[x] Built a password strength checker
[x] Built phishing-awareness tooling
[x] Completed security policy review project
[x] Practiced ISO 27001 Annex A mapping
[x] Completed TryHackMe cybersecurity training
[x] Practiced Cisco Packet Tracer
[x] Built a personal cybersecurity portfolio
[x] Developed practical Linux/security skills
[x] Cybersecurity Fundamentals
[x] Networking Fundamentals
[x] Linux Fundamentals
[x] Python Security Tooling
[x] Security Projects
[x] GRC / ISO 27001 Practice
[x] Decode Labs Internship
[x] TryHackMe Security Training
[~] Advanced Web Security
[~] Active Directory Lab
[~] Privilege Escalation
[ ] eJPT
[ ] CCNA
[ ] OSCP
[ ] Professional Red Team / Pentesting Role
goal = "RED TEAMER"
while goal:
learn()
build()
lab()
break_things_ethically()
document()
improve()Learn the technology. Understand the weakness. Think like the attacker. Defend like the professional.
π GitHub: github.com/rayan-407 πΌ LinkedIn: linkedin.com/in/YOUR-LINKEDIN-HANDLE
Every project is another step toward becoming a better security professional.