Nasir Khan - Synack Red Team Member

Nasir Khan

Synack Red Team Member

Pakistan

Join Prog.AI to see contacts

Summary

🤩

Rockstar

🎓

Top School

Nasir Khan is a software engineer and Synack Red Team member with nine years of experience, based in Pakistan. He blends offensive security engineering and pragmatic backend development, contributing to tools like ghauri (an advanced SQLi detection/exploitation tool) and cross-platform Python course downloaders (udemy-dl, acloud-dl). His open-source work focuses on payload and extraction logic, connection/error handling, and hardening tools—adding features such as stacked-query support, subtitle/caption downloading, and Python 2/3 compatibility. At Synack since 2021 he applies hands-on pen-testing skills to real-world assessments while his GitHub habit of fixing subtle auth and parsing bugs keeps projects production-ready. He holds a Bachelor's in Computer Science from Hamdard University and combines a hacker’s curiosity with disciplined engineering, true to his GitHub motto that anything the mind can conceive can be achieved.

10 years of coding experience

Bachelor's degree, Computer Science, Bachelor's degree, Computer Science at Hamdard University

Stackoverflow

Stats

11reputation

538reached

1answer

0questions

Github Skills (16)

downloadmanager10

sql-injection10

error-handling10

security-testing10

download-manager10

sql10

python10

http-request9

web-scraping9

http-requests9

back-end-development9

api8

file-handling8

api-doc8

test-automation8

Programming languages (3)

CGoPython

Github contributions (5)

r0oth3x49/acloud-dl

Jul 2018 - Jul 2022

A cross-platform python based utility to download courses from acloud.guru for personal offline use.

Role in this project:

Back-end Developer

Contributions:1 release, 35 commits, 18 PRs in 4 years

Contributions summary:Nasir primarily focused on improving the functionality and quality of a Python-based course downloader. They added support for downloading course assets and subtitles. Several commits involved fixing bugs and improving code quality. The user also addressed issues related to authorization and course information extraction.

downloaderpythonosxwindowslinux

r0oth3x49/ghauri

Oct 2022 - Jan 2023

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Role in this project:

Back-end Developer & Security Engineer

Contributions:42 releases, 63 commits, 12 PRs in 3 months

Contributions summary:Nasir primarily contributed to the development of the `ghauri` tool, focusing on SQL injection detection and exploitation. Their work involved modifying core files related to payload generation (`payloads.py`), error-based extraction (`extract.py`), and testing methodologies (`tests.py`). They also implemented support for stacked queries and added features to handle connection errors. Additionally, the user made updates related to user interface, code quality, and other minor bug fixes and enhancements.

exploitingsecurity-flawsautomatessecurityinjection

Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.

Request Free Trial