Hey 👋 Its

Hamza Khattak 👋

🚀 A Guy in Cyber Security. Crafting Code & Breaking Applications 👻

Skills

• Tools & Frameworks: Nessus, Metasploit, Burp Suite, Cobalt Strike, Nmap, Impacket, IDA Pro, GDB, Volatility, Autopsy, Magnet AXIOM, Kubernetes, Docker
• Programming Languages: Python, C, C++, PHP, JavaScript, Bash, PowerShell, Go
• Platforms: Linux, Windows, Vercel, AWS, Azure, GCP, DigitalOcean, Cloudflare

Achievements

• 1st Place in AirTech CTF Final on-site 2024
• 2nd Place in SoftTech CTF Final on-site 2024
• 32nd Place in Black Hat MEA 2023 World Final
• 2nd Place in ByteBolt CTF organized by ByteBoltSec, online (2023)
• 3rd Place in Digital Pakistan Cyber Security Hackathon (2023)
• 3rd Place in NUST Hackathon CTF organized by Military College of Signals (2023)
• 5th Place in DeconstruCTF 2023 organized by DSC-VIT, online (2023)
• 5th Place in NasCon'23 CTF organized by FAST NUCES, on-site in Islamabad (2023)

Experience

• Security Engineer at Tecvity (2024 - Present) [Remote]
• FREELANCER at UpWork (2021 - Present) [Remote]
• IS INTERN at AirOverFlow (September 2021 - April 2022) [On-Site]

Education

• Bachelors in Cyber Security from Air University, Islamabad (2021 - 2025)

Certifications

• Certified Professional Penetration Tester (eCPPTv2) INE Security
• CERTIFIED NETWORK SECURITY PRACTITIONER (CNSP) - The SecOps Group
• NETWORK SECURITY EXPERT (NSE-3) - Fortinet
• JUNIOR PENETRATION TESTER (JPT) - TryHackMe

Projects

• MalCord - MalCord Stealer is a sophisticated malware tool that utilizes emoji-based triggers for covert command execution. It features command and control (C2), data exfiltration, browser password stealing, session token hijacking, and connected device scanning to expand its attack surface. MalCord can detect USB devices for data exfiltration or payload deployment and employs a unique persistence method to maintain long-term access.
• ParadoxAI - ParadoxAI is an app and browser extension currently under development, designed to detect misinformation campaigns and AI-generated content across the internet. By leveraging advanced algorithms and machine learning, ParadoxAI will analyze online content for patterns and anomalies, helping users identify and avoid manipulated or artificially generated information.
• GPhisher - GPhisher is a clone web app designed for conducting Gmail phishing attacks. Currently, work is underway to create phishlets for Gmail Phisher using EvilGinx, which will leverage its reverse proxy capabilities to enable more advanced and evasive phishing techniques, allowing seamless credential harvesting while bypassing security measures like multi-factor authentication (MFA) and CAPTCHA protections.
• video2text - Video2Text is a Python-based tool designed to extract text from videos using Optical Character Recognition (OCR). It leverages the OpenCV library for video processing and the pytesseract library to perform OCR, enabling efficient text extraction from video frames.
• Textor - Textor is a GUI-based application written in Python that allows users to create, modify, and delete text files.

Additional Experiences

• Red Team Lead at Air University Cyber Security Society (2023 - Present)
• CTF PLAYER at TryHackMe / HacktheBox / PG-Play / CTFTimes (2022 - Present)

HackTheBox

TryHackMe

Reach out to me

• Discord: kh4tt4k
• Email: mhamzakhattak@proton.me
• Twitter: @mhamzakhattak
• LinkedIn: @mhamzakhattak
• GitHub: mhamzakhattak
• Website: mhamzakhattak.vercel.app