session_active :: channel_secure

Mapping attack surfaces.
Exploiting the gaps.
Scripting the fix.

I'm Maheen Rizwan, an Offensive Security Analyst and Cybersecurity Practitioner. I specialize in web application penetration testing, network exploitation, and building modular security tools that automate processes.

"Understand the network baseline, exploit the visibility gaps, then script the fix."
view_arsenal() initiate_contact()
profile.sh

I'm Maheen Rizwan, an Offensive Security Analyst and Cybersecurity Practitioner. I specialize in web application penetration testing, network exploitation, and building modular security tools that automate processes.

01 // capability_matrix

Skill Map

>Web Pentesting
>Network Exploitation
>OSINT & SOCMINT
>Wireless Auditing
>SIEM & Log Analysis
>Container Security
>ICS / SCADA Security
>Cloud (AWS) Security
>Incident Response
>Windows/Linux Forensics
>Honeypot Engineering
>Python Scripting & Automation

ECOSYSTEM_&_TOOLING

02 // deployments

Arsenal, Projects & Work

click or tap any card for the full operational summary

Ethical Hacker Intern Secure Dev Labs

Jun 2026 – Jul 2026
  • Conducted structured network security exercises focusing on Active Directory (AD) attack paths, privilege escalation, and internal pivoting.
  • Executed advanced web service enumeration and vulnerability assessments on localized lab assets.

Technical Analyst Intern SNSKIES / DESC

Apr 2026 – Present
  • Generated tactical threat intelligence reports detailing ransomware footprints, malicious traffic vectors, and IoCs.
  • Performed deep-packet analysis and protocol diagnostics using Wireshark on simulated network security incidents.

CTF Competitor & Lab Designer Team Base102

Jul 2025 – Present
  • Active participant in regional cybersecurity exercises, including Cyber Streak CTF 2025 and NineByte CTF 2026.
  • Deployed defensive sandbox honeypots to capture, log, and study threat actor authentication and brute-force behavior.

03 // impact_log

Leadership & Impact

Female Coordinator @ Technology & Innovation Society (AWKUM)

AWKUM Students Council

TECH_ADVOCACY

Organized large-scale educational tracks, including a GitHub Masterclass for 100+ students, to build campus-wide tech literacy.

DIVERSITY_IN_TECH

Dedicated to mentoring, inspiring, and empowering female students to step into high-impact fields like Cybersecurity, AI, and Data Science.

04 // credentials

Certifications & Training

CAPIJ — Certified API Hacking Junior

The XSS Rat · Jul 2026

Vulnerability Assessment Achievement

CCSDF · Apr 2026

CCNA (Pt. 1) — Introduction to Networks

Cisco Academy, UET Peshawar · Oct 2025

Ethical Hacking & Pentest Mastery

OCSALY Academy

Advent of Cyber 2025 — Web Forensics & Malware Analysis

TryHackMe

Cybergen 5-Day Ethical Hacking Boot Camp

GDGOC PIEAC

05 // platform_standings

TryHackMe Training Breakdown

Top 3%

GLOBAL_RANKING

100+

LABS_COMPLETED

FOCUS_AREAS

Practical penetration testing, infrastructure auditing, network tracking, and OSINT methodology.

Successfully executed advanced tracking, profiling, and digital footprinting investigations across complex labs (OhSINT, Sakura Room, KaffeeSec - SoMeSINT).

Performed Windows Registry forensics, extracted artifacts, triaged security events in Microsoft Sentinel, and analyzed large-scale raw packet captures (.pcap) for Command and Control (C2) channel detection.

Chained flaws from initial reconnaissance to full server compromise, including IDOR validation, Prompt Injection attacks on autonomous AI agents, Cross-Site Scripting (XSS), and Race Conditions.

Configured custom YARA rules for signature-based anomaly detection and utilized CyberChef for advanced data decoding and cryptographic analysis during incident triage.

Explored threat landscapes unique to cloud environments (AWS S3 Bucket enumeration), Docker Container escapes, and Operational Technology (ICS/Modbus protocol vulnerability exploitation).

06 // open_channel

Let's connect

Open to collaborations, internships, and CTF teams. Reach out through either channel below.

LinkedIn GitHub

secure_channel :: encrypted_form

© 2026 Maheen Rizwan. All rights reserved.

root@security:~$ connection_secure