lokibuddin shaikh
Cybersecurity professional
About
Cybersecurity professional specializing in Red Teaming and Penetration Testing across web, network, and Active Directory environments. Hands-on experience identifying and responsibly disclosing real-world vulnerabilities, including reflected XSS, database leaks, authentication and authorization bypasses, and IDORs. Strong practical expertise with Kali Linux, Burp Suite, Nmap, Wireshark, Metasploit, and scripting in Python and Bash, along with database security testing using MySQL, Oracle, and PL/SQL. Experienced in hands-on offensive security methodologies, including privilege escalation, lateral movement, advanced network pivoting, exploitation workflows, and secure remediation practices.
Skills & Expertise (19)
Work Experience
Developer
4SEC
Present - Present
Developed an AI-powered Linux-based Web Application Penetration Testing tool with modules for recon, WAF detection, parameter analysis, automated SQLi/XSS checks, intelligent payload generation, exploit chaining, and HTML/JSON reporting.
Security Researcher
Live Vulnerability Research & Responsible Disclosure
Present - Present
Found and responsibly disclosed critical vulnerabilities on live web targets, including reflected XSS, SSTI, database misconfigurations and data leaks, JWT token manipulation, admin panel access bypasses, and IDORs. Produced reproducible PoCs, provided remediation guidance, and coordinated responsible disclosure with site owners.
Red Team Analyst
Red Teaming Exercises
Present - Present
Completed extensive hands-on red teaming labs and assessments, gaining practical experience in internal network penetration testing and Active Directory attack scenarios. Applied advanced techniques such as Kerberoasting, Silver and Golden Ticket abuse, pass-the-hash attacks, credential spraying, lateral movement, and network pivoting to simulate real-world adversary behavior.
Trainer
Cybersecurity Training & Mentorship
Present - Jan 2026
Delivered hands-on cybersecurity training covering ethical hacking, web exploitation (SQLi, SSTI, XSS) through self-created labs, Python and C for security, Linux system hacking, Active Directory basics, internal pentesting, and introductory red teaming exercises.
Education
Diploma in Cyber Security - Indian School of Ethical Hacking
2025 - 2026 · Afghanistan
B.Sc in Advanced Networking And Cyber Security - Brainware University
2022 - 2025 · Afghanistan
H.S (Science) - Kritipur Nabin Chandra (H.S)
2020 - 2022 · Afghanistan
Certifications
Certified Ethical Hacker
Cisco · 2025
Junior Penetration Tester Learning Path
TryHackMe · 2025
Certified Multicloud Architect Professional
Oracle Cloud Infrastructure · 2025
Introduction to Dark Web, Anonymity & Cryptocurrency
EC-Council · 2025
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (19)
Click a skill to find developers with the same skill
