Hey! 👋 My name is Asif. I am a passionate penetration tester exploring red-team techniques, learning offensive methods, pivoting and post-exploit workflows.
In my free time I contribute to the community, report vulnerabilities through responsible disclosure, and publish CVEs for confirmed issues. I’m also experimenting with how AI can be applied in the offensive security niche, exploring ways to combine AI with red-teaming and vulnerability research.
CVEs
| CVE | Short Description | References |
| WordPress security researcher CVEs overview | An overview of the vulnerabilities I’ve reported and published through Wordfence Threat Intelligence, including CVE IDs, descriptions, and affected software. | Wordfence Researcher Page |
| CVE-2024-34955 | Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. | NVD Entry |
| CVE-2024-34954 | Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. | NVD Entry |
| CVE-2025-54384 | Stored XSS vector in Markdown description fields. |
NVD Entry
GitHub Advisory |
Guides, etc
| Project | Short Description | Stars | Forks |
| OWASP GenAI Red Teaming Guide | A community-driven guide by OWASP on red teaming for generative AI systems, outlining risks, testing approaches, and mitigation strategies. | N/A | N/A |
I’m an Offensive Security Engineer / Penetration Tester with a background from Royal Holloway, University of London. Born in the Netherlands 🇳🇱 and native in Dutch, I spend the majority of my time learning and practising hands-on offensive techniques, ethical hacking, responsible disclosure and publishing technical writeups on my blog.
My work focuses on practical penetration testing, red-team skills: post-exploit pivoting, Active Directory escalation, AV/EDR evasion and real-world engagements.
I balance professional consulting with continuous learning (CTFs, HTB labs, and research) and producing readable, writeups for the community.
- Education: MSc Information Security (Royal Holloway, University of London); Bachelor in ICT: Information & Communication Technology (Windesheim University of Applied Sciences)
- Location / Languages: Netherlands: born and raised; native Dutch 🇳🇱, fluent English 🇬🇧; conversational in Urdu/Hindi 🇵🇰 🇮🇳 and some Arabic 🇸🇦
- Specialties: Web hacking, red teaming, pivoting, AV/EDR evasion, escalation paths, exploit development, responsible disclosure
- Interests: Purple teaming, adversary emulation, automated recon pipelines, threat-informed defense
You can reach me here 👇
