01
Offensive Testing
Comprehensive offensive security testing and vulnerability assessment
OFFENSIVE SECURITY · DEFENSIVE IMPACT
Hi, I’m Sheet Abdullah.
Finding the gaps.
Strengthening
the system.
Security Researcher & Bug Bounty Hunter
Discovering vulnerabilities before malicious actors do. Focused on offensive security, penetration testing, and research that makes the digital world safer.
OFFENSIVE MINDSET. MEANINGFUL IMPACT.Get to know me
01 / ABOUT ME
Curiosity drives the research.
Security drives the purpose.
“Finding vulnerabilities is not about breaking things — it’s about building more secure systems.”
I’m a dedicated Cybersecurity Researcher and Bug Bounty Hunter with extensive expertise in offensive security testing.
My journey has been shaped by industry-recognized certifications including OSCP+, OSWE, OSEP, OSCP, OSWP, OSIR, OSTH, OSWA, eCPPT, eWPTX, eMAPT, CRTA, and CAPT.
My expertise spans web application security, mobile penetration testing, cloud security assessments, network infrastructure testing, and red team operations.
With hands-on experience in penetration testing, vulnerability management, digital forensics, and OSINT, I help organizations strengthen their security posture through bug bounty programs on HackerOne and Bugcrowd, and professional security consulting.
Explore my background ↗02 / SKILLS & SERVICES
A broad view of the attack surface.
From applications to infrastructure, practical security expertise across the stack.
02
Web App Pentest
Full-stack web application security testing and penetration testing
03
Mobile Pentest
iOS and Android application security testing and reverse engineering
04
Cloud Security
Cloud infrastructure security assessment and hardening
05
Network Pentest
Network security assessment and infrastructure penetration testing
06
Red Team
Red team exercises and adversary simulation
07
Training
Cybersecurity training and educational workshops
08
Consultancy
Security consultation and advisory services
THE TOOLKIT BEHIND THE WORKExplore my tools ↗
03 / CERTIFICATIONS & ACHIEVEMENTS
Knowledge, put to the test.
Professional credentials across offensive security, application testing, and security foundations.
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
View certificate ↗
CAP
Certified AppSec Practitioner V2
ID: 11053346
View certificate ↗
CNSP
Certified Network Security Practitioner
ID: 11050332
View certificate ↗
04 / SECURITY RESEARCH
From discovery to understanding.
Vulnerability research, technical articles, and insights from the offensive side.
Explore the existing research summaries, covering web vulnerabilities, API security, and mobile reverse engineering.
All research & write-ups ↗
Bug Bounty01
Critical XSS in Fortune 500 Company
Discovered a stored XSS vulnerability affecting 50M+ users. Full technical breakdown and exploitation chain.
Research02
Subdomain Takeover at Scale
Automated methodology for discovering subdomain takeover vulnerabilities across large infrastructure.
Write-up03
IDOR to Account Takeover
Chaining multiple IDOR vulnerabilities to achieve full account takeover. Step-by-step analysis.
Bug Bounty04
Race Condition in Payment Flow
Exploiting a race condition to duplicate payment transactions. $10,000 bounty awarded.
Tutorial05
API Security Best Practices
Comprehensive guide to securing REST APIs and common vulnerability patterns to avoid.
Research06
Mobile App Reverse Engineering
Deep dive into Android app security: from decompilation to discovering hidden endpoints.
05 / PROJECTS & PRACTICE
The work behind the research.
CODE & AUTOMATION
Explore my GitHub
Find my repositories and follow my work on GitHub. My toolkit includes custom Python and Bash automation scripts.
Visit GitHubBUG BOUNTY
Security research profiles
Connect with my bug bounty work through my existing researcher profiles.
06 / CONTACT
Let’s build something
more secure.
Have a security assessment in mind, a research collaboration, or a question? Let’s start a conversation.
sheet.cyber@gmail.comFIND ME ELSEWHERE
Prefer a direct conversation? Email or reach out on LinkedIn anytime.