Zeshan Amin
personnel_file // 0x2A

Zeshan Amin

CYBERSECURITY INSTRUCTOR // OFFENSIVE SECURITY PRACTITIONER

Offensive security practitioner with practical experience in penetration testing, API security assessments, and red-team-oriented methodologies. I've worked across identifying vulnerabilities, analyzing attack surfaces, and building structured approaches to simulate real-world adversarial behavior — alongside serving as a Data Security Analyst protecting organizational data assets.

I mentor cybersecurity students locally and internationally, focused on practical penetration testing and API exploitation, and stay active on HackerOne refining vulnerability research skills.

experience_log

Professional experience

Jan 2026 — Present

Bug Bounty & Security Research

HackerOne
  • Active participant in vulnerability discovery and responsible disclosure
  • Focus areas: API logic flaws, authentication bypass, misconfigurations
Mar 2024 — Present

Cybersecurity Instructor & Program Lead

CyberZest
  • Delivered structured penetration testing training to 35+ students
  • Mentored 2 advanced Red Team students (France & Saudi Arabia)
  • Designed and launched the Web API Bug Bounty course
  • Developed practical, lab-based offensive security curriculum
May 2024 — May 2025

Data Security Analyst & Team Lead

Giga House Agency
  • Managed and secured organizational data assets and internal infrastructure
  • Implemented access control policies and system hardening practices
  • Conducted internal security assessments and vulnerability identification
  • Led a small technical team for security implementation and issue resolution
github // zexhanamin

Projects

Selected tools built for offensive security practice, automation, and education.

JAVASCRIPT · DESKTOP

ZEX — Secure File Encryption App

A lightweight, fully offline desktop app for encrypting/decrypting files using AES-256-GCM authenticated encryption. Multi-file support, custom/auto-generated key management, 3-pass secure wipe, and a full audit log — built from scratch with a custom GUI.

github.com/zexhanamin/zex →
PYTHON · NETWORKING

Multithreaded Network Port Scanner

A high-performance recon tool implementing multithreading for fast host discovery and port scanning, with structured JSON output — built to demonstrate Python sockets and concurrent programming.

github.com/zexhanamin/Network-Port-Scanner →
BASH · SOCIAL ENGINEERING

PHISHPRO — Phishing Simulation Toolkit

A Bash-based framework for lab environments and cybersecurity training, providing customizable phishing pages and workflow scripts to replicate social engineering scenarios ethically.

github.com/zexhanamin/phishpro →
PYTHON · EDUCATIONAL DEMO

Demo Keylogger

An educational demo built to teach how input-monitoring malware works at a conceptual level, for classroom and awareness use in controlled environments.

github.com/zexhanamin/demo-keylogger →
competencies

Core technical skills

Offensive Security

Web App Pentesting API Security Testing External Network Pentesting Phishing Simulation Red Team Methodologies OSINT & Recon Post-Exploitation

Tools & Platforms

Burp Suite Pro Nmap ffuf Metasploit Wireshark Postman Gophish AWS

Scripting & Systems

Python (Strong) Bash Kali Linux BlackArch Wifislax Custom tool dev
certifications

Certifications & training

Practical Ethical HackingHeath Adams — TCM Security
Practical Web HackingAlex Olsen — TCM Security
Practical API HackingAlex Olsen — TCM Security
Practical Bug BountyHeath Adams — TCM Security
Practical Phishing CampaignsAaron Wilson — TCM Security
External Pentest PlaybookHeath Adams — TCM Security
Mobile Application Penetration TestingAaron Wilson — TCM Security
OSINT FundamentalsHeath Adams — TCM Security
Python 101 & 201 for HackersRiley Kidd — TCM Security
Beginner's Guide to IoT & Hardware HackingAndrew Bellini — TCM Security
CEH v13 TrainingVision Training System
CEHPunjab Skills Development Fund
education

Education

2024 — 2028

BS Cyber Security

Islamia University of Bahawalpur · Current CGPA 3.71

2022 — 2024

ICS (Computer Science)

BWP Board · 862 / 1200