> system initializing...

> identity loading...

> security environment ready.

Skip to content

CYBERSECURITY UNDERGRADUATE

SECURITY OPERATIONSDETECTION ENGINEERINGBLUE TEAM

MUHAMMADHASEEBSAJID

Exploring defensive security, security operations, network security, vulnerability assessment and threat detection through hands-on projects and continuous learning.

02ABOUT

The Person Behind The Security

WHO AM I?

There is more to security
than finding vulnerabilities.Someone has to build the defenses.

I'm a BS Cybersecurity undergraduate at NASTP Institute of Information Technology (Air University), currently in my 5th semester, based in Lahore, Pakistan.

My path into security started with curiosity about how systems break — exploring offensive security through TryHackMe and Hack The Box — and has steadily shifted toward building and defending: defensive security, security operations, and threat detection.

Alongside academic work, I build real software: an Active Directory assessment platform, an LLM-assisted incident analysis tool, passive domain security scanners, and low-level projects in Assembly and C++. Hands-on projects are how I learn best.

PROGRESSION
  1. OFFENSIVE SECURITY EXPLORATION
  2. SECURITY ENGINEERING
  3. DEFENSIVE SECURITY
  4. SECURITY OPERATIONS
  5. THREAT DETECTION
03CAPABILITIES

My Cybersecurity Arsenal

Defensive Security
Network Security
Vulnerability Assessment
Web Application Security
TOP6%GLOBAL

TRYHACKME

GLOBAL RANKING
  • Pre-Security PathCOMPLETED
  • Cybersecurity 101COMPLETED
  • Junior Penetration TesterIN PROGRESS

Hands-on learning through guided offensive and defensive labs, alongside Hack The Box practice.

04DEPLOYED / REAL-WORLD BUILDS

Selected Builds

Real software. Real deployments.

FEATUREDINTERNSHIPLIVE2026 — PRIMARY SHOWCASE

PATHFINDER AI

Enterprise-Grade Active Directory Security Assessment

PathFinder AI is an enterprise-grade Active Directory security assessment platform. It ingests AD data through CSV/JSON, builds a graph of identities and permissions, runs a deterministic plugin-based detection engine to identify privilege-escalation attack paths, scores the environment from 0–100, and generates executive remediation reports.

⚠ GENERATIVE AI EXPLAINS FINDINGS. IT DOES NOT DETECT THEM. Detection is deterministic and plugin-based.

AI EXPLAINS. DETERMINISTIC LOGIC DETECTS.

IDENTITY GRAPH // CONCEPTILLUSTRATIVE
ATTACK PATHDC-01USERSUSER-ASVC-BADMINSADMIN-C
USERSGROUPSCOMPUTERSPERMISSION / ESCALATION

Concept visualization of how PathFinder AI models identities and permissions. Not a live scan.

ARCHITECTURE
  • FrontendReact single-page application
  • BackendFastAPI (Python)
  • Data & InfraSupabase — PostgreSQL, Auth, Storage, Realtime
  • DetectionDeterministic plugin-based engine over the identity/permission graph
  • AI LayerGenerative AI used only to explain findings in plain language — never to detect them
  • DeploymentFree-tier-oriented deployment architecture
View Live Platform ↗View Source ↗
OWN PROJECTLIVE2026

SOCPILOT AI

LLM-Assisted Incident Investigation for SOC Analysts

SOCPilot AI is a modern full-stack web application designed to help Security Operations Center analysts investigate security incidents with assistance from a local LLM.

  • Security log upload
  • Executive summaries
  • Technical analysis
  • MITRE ATT&CK mapping
  • IOC extraction
  • Incident timelines
  • Professional PDF reports
  • SOC-focused interface
LIVE PLATFORM ↗VIEW SOURCE ↗
SOC CONSOLE // CONCEPT

LOG INGESTION

IOC EXTRACTION

MITRE ATT&CK

INCIDENT TIMELINE

EXECUTIVE SUMMARYTECHNICAL ANALYSISPDF REPORTS
Interface concept — analysis is produced with assistance from a local LLM.
OWN PROJECTLIVE2026

VERISHIELD

Passive Domain Security Assessment

VeriShield performs passive security scans against public domains, checking SSL/TLS certificates, HTTP security headers, DNS SPF and DMARC records and exposed paths, then generates an AI-driven executive summary with actionable remediation guidance.

  • SSL/TLS certificate checks
  • HTTP security header analysis
  • DNS SPF record validation
  • DNS DMARC record validation
  • Exposed path discovery
  • AI-driven executive summary with remediation guidance
LIVE PLATFORM ↗VIEW SOURCE ↗
PASSIVE SCAN REPORT // CONCEPTPASSIVE ASSESSMENT
  • SSL/TLS CERTIFICATECHECKED
  • HTTP SECURITY HEADERSCHECKED
  • DNS SPF RECORDCHECKED
  • DNS DMARC RECORDCHECKED
  • EXPOSED PATHSCHECKED
  • AI EXECUTIVE SUMMARYGENERATED
  • REMEDIATION GUIDANCEREADY
Non-intrusive checks against public domain data only — the scan never attacks the target.
05CATEGORIES B & C

Security Projects

B — CYBERSECURITY PROJECTS
OWN PROJECT2026 · NETWORK SECURITY APPLICATION · DUAL REPOSITORY STUDY

SECUREPAYCASE STUDY

SecurePay exists in two variants. The vulnerable version is an intentionally vulnerable Node.js web application developed for educational purposes to demonstrate common web security vulnerabilities and penetration-testing techniques. The hardened version implements security controls and industry best practices to mitigate those vulnerabilities.

  1. 01 — VULNERABLE

    Build the target

    An intentionally vulnerable Node.js application demonstrating common web security vulnerabilities — a safe, self-owned practice range.

  2. 02 — ANALYZE

    Break it deliberately

    Apply penetration-testing techniques against the app to understand exactly how each vulnerability is exploited and what impact follows.

  3. 03 — HARDEN

    Defend with controls

    Rebuild the application implementing security controls and industry best practices that mitigate each identified weakness.

  • I can study how vulnerabilities occur.
  • I can understand their impact.
  • I can apply security controls.
  • I can compare vulnerable and hardened implementations.
VULNERABLE REPO ↗HARDENED REPO ↗
ALLOCATION GRAPH // CONCEPTC++ · QT
P1P2P3R1R2
PROCESS RESOURCE CIRCULAR WAIT

Concept illustration of Banker's Algorithm & deadlock detection — not the original Qt application.

DEADLOCK SIMULATOR

Operating Systems Visualization

A C++ Qt desktop application simulating deadlock avoidance, detection and recovery using Banker's Algorithm and Resource Allocation Graphs.

GITHUB ↗
PRIVATE / ACADEMIC
GITHUB ↗
PRIVATE / ACADEMIC
PRIVATE / ACADEMIC
PRIVATE / ACADEMIC
07 — EXPERIMENTAL ZONE

The Lab

Tools I work with

WORKBENCH // LOCAL READY

Tap or hover a tool to inspect. Notes describe usage context, not proficiency levels.

08TIMELINE

The Journey

  1. 2024

    THE SPARK

    Cybersecurity undergraduate journey begins — BS Cybersecurity at NASTP Institute of Information Technology (Air University). Early exploration of offensive security concepts through hands-on platforms.

  2. 2025

    HANDS-ON SECURITY

    Security-focused academic and practical projects — university network security assessment and hardening work, alongside structured TryHackMe learning paths.

  3. 2026

    BUILDING & DEEPENING

    Deeper security exploration and software projects — SecurePay vulnerable/hardened variants, SecureVault in x86 Assembly, Deadlock Simulator, and deployed security tools.

  4. CURRENT ●

    DEFENSE IN FOCUS

    Security Operations & Detection Engineering direction — Security Operations & Detection Engineering Intern @ The Arzens, focused on threat detection and defensive security.

09 — GET IN TOUCHRESPONSE WINDOW: OPEN

Let's build
something secure.

Interested in discussing security operations, defensive tooling, or a potential opportunity? My inbox is open.

LOCATION: LAHORE, PAKISTAN · CURRENT ROLE: SECURITY OPERATIONS & DETECTION ENGINEERING INTERN @ THE ARZENS