Web & API Security
OWASP Top 10, vulnerability assessment, authorized penetration testing, security testing and professional reporting.
I'm Shaid Mahamud, a cybersecurity professional focused on penetration testing, web and API security, OSINT, network security, Linux and practical security research.
Shaid Mahamud is a cybersecurity specialist with a practical offensive-security mindset focused on identifying weaknesses, understanding attack paths and communicating security findings clearly.
My background includes web and API penetration testing, OSINT and reconnaissance, Linux, networking, Active Directory labs, Python and Bash automation, and security tooling.
I also develop practical knowledge in security operations, SIEM, digital forensics, AWS fundamentals and malware-analysis fundamentals.
OWASP Top 10, vulnerability assessment, authorized penetration testing, security testing and professional reporting.
Open-source intelligence, target discovery, digital-footprint analysis and structured reconnaissance workflows.
CCNA-level networking with TCP/IP, subnetting, DNS, DHCP, ARP, NAT, ports, HTTP and firewall fundamentals.
Linux and Windows administration, Kali Linux, virtualization and Active Directory security labs.
Python and Bash scripting for repeatable security workflows, enumeration and operational automation.
Developing defensive capability across monitoring, SIEM, digital forensics, cloud security and malware-analysis fundamentals.
// selected security, programming and university projects
Reconnaissance-focused security tooling for information gathering and enumeration.
Shell · Security · ReconAutomation for repeatable Nmap network scanning and reconnaissance workflows.
Nmap · Bash · AutomationBash-based workflow for authorized SQL injection testing and repeatable assessment tasks.
SQLMap · Bash · Web SecurityMachine-learning project for detecting and classifying spam SMS messages.
Python · ML · NLPUniversity software project focused on a local community and service-oriented web application.
PHP · Web · DatabaseExplore the complete collection of security, programming and university projects.
Public repositoriesProviding authorized security testing, vulnerability assessment, penetration testing and professional security reporting for clients.
Practicing responsible vulnerability discovery and security research across web applications and APIs.
Conducting controlled penetration-testing labs covering reconnaissance, exploitation, privilege escalation and post-exploitation analysis.
Building cybersecurity learning resources, hands-on labs, CTF practice and beginner-focused security education.
Ongoing · Relevant coursework includes computer networks, operating systems and information security.
Academic projects focused on secure application development and automation.Complete resume with experience, education, certifications and technical skills.
Authorized security testing aligned with common web application security risks.
Structured open-source research and digital-footprint analysis.
SPF, DKIM and DMARC configuration and security review.
Python and Bash workflows for repetitive security tasks.
For cybersecurity opportunities, authorized freelance security work, collaborations or technical projects, feel free to reach out.