Web Pentest
OWASP Top 10Auth & Session TestingInput Validation
[ ethical-access granted ]
Muhamad Faidan | Cybersecurity Enthusiast
Ethical Hacker specializing in offensive security and penetration testing. I help organizations secure their digital infrastructure through precise vulnerability identification and proactive mitigation strategies.
$run pentest --target production
About
I am an Ethical Hacker who believes that the best defense begins with understanding the attacker's mindset. Drawing from a background in strategic problem-solving, I bring a tactical, structured, and data-driven approach to the world of cybersecurity.
Rather than simply executing automated tools, I prioritize a deep understanding of underlying system architectures. I am adept at operating across diverse environments, continuously honing my offensive security skills in Kali Linux, and dissecting digital anomalies with meticulous attention to detail. My mission is to safeguard digital assets by uncovering vulnerabilities before they escalate into threats, transforming potential weaknesses into a proactive and resilient security posture.
Core Skills
Network Security
Service EnumerationAttack Surface MappingHardening Review
Tooling
Burp SuiteNmapWiresharkMetasploitAutomation Tools
Reporting
Risk PrioritizationPoC DocumentationRemediation Tracking
Selected Projects
Web App Security Assessment
Scope: E-commerce platform audit
Approach: Conducted comprehensive reconnaissance, authentication testing, and business logic validation across critical endpoints.
Impact: Identified high-risk IDOR vulnerabilities and insecure token handling, ensuring successful patches prior to production scale-up.
API Penetration Test
Scope: Internal fintech API
Approach: Tested access controls, rate limiting mechanisms, and input sanitization across core services.
Impact: Mitigated sensitive data exposure through improved authorization models and robust request validation.
Security Baseline Review
Scope: Infrastructure hardening check
Approach: Reviewed public-facing service configurations, TLS implementations, and secret exposure patterns.
Impact: Enhanced overall security posture by implementing standardized hardening checklists across all environments.
Contact
Open for security testing collaborations and freelance projects.