GitHub - usmanfarazz/usmanfarazz: My GitHub Profile | Red Teamer | Cybersecurity Notes

About Me

I'm Usman Faraz, a Cybersecurity student at PAF-IAST, Pakistan, focused on offensive security and red teaming. I build my skills through hands-on labs, CTF challenges and small security tools, and I document what I learn along the way.

🎓 Education: BS Cybersecurity, PAF-IAST
⚔️ Focus: Red Teaming, Web App Pentesting, Network Security
📚 Currently learning: Active Directory attacks, exploit development, malware analysis
🐧 Daily driver: Kali Linux / Ubuntu
🤝 Open to: Internships, CTF teams and security collaborations

┌──(usmanfarazz㉿kali)-[~]
└─$ whoami --verbose

  name      : Usman Faraz
  role      : Cybersecurity Student | Aspiring Red Teamer
  location  : Pakistan 🇵🇰
  focus     : [ "Offensive Security", "Web App Pentesting", "Network Security" ]
  learning  : [ "Active Directory Attacks", "Exploit Development", "Malware Analysis" ]
  mindset   : "Think like an attacker, defend like an engineer."
  status    : Open to internships & collaborations ✅

Tech Stack

Programming & Scripting

Operating Systems

Security Toolkit

Core tools — labs & CTFs

Currently learning — Active Directory, red teaming & reverse engineering

Areas of Focus

🌐
Web App Pentesting
_{OWASP Top 10, Burp Suite}

🖧
Network Security
_{Recon, Scanning, Traffic Analysis}

⚔️
Red Teaming
_{Exploitation, Privilege Escalation}

🤖
AI + Security
_{LLM Apps, Automation}

Featured Work

Project	Description	Stack
🔐 Kryvo	Offline encrypted Android vault for photos, videos, audio, passwords & notes — disguise icons, App Lock, intruder selfie, fake PIN (AES-256-GCM, no internet permission) · Live demo
🐾 ShieldPal	Your cute cyber guardian: scam link, message & QR checker, Live Guard, Deep Scan, Shield VPN and Pal AI with a pet that gets sick when your phone is unsafe — offline-first, no ads, no tracking, 14 languages · Live demo
🔍 Port Scanner	Multi-threaded TCP port scanner with service detection & banner grabbing
🔐 Password Analyzer	Local password strength checker with entropy & crack-time estimation
🛡️ Password Strength Checker (Web)	Client-side password strength checker, no network calls · Live demo
📒 Cybersec Notes	Personal knowledge base for cybersecurity and penetration testing
🤖 OBA Core – Horquva	AI Workforce Intelligence Engine (MVP) · Live demo