Information Security · GRC · Security Assessment · Corporate Training

I work as a cybersecurity manager, combining hands-on security assessment with information-security governance, risk and compliance. My work spans web and API security, network security, practical tooling, research and teaching. This portfolio brings together tools I build, coauthored research and learning resources.

ABZSECURE is my professional brand for security consultancy and training. Here on GitHub, I share the tools, research and learning materials behind my work.

Try PostureKit · Try EvidenceGate · Read the handbook

Use a tool: PostureKit demo · EvidenceGate demo

Learn the workflow: From Scope to Security Evidence

Explore the research: CWE613Study

• PostureKit — Windows, directory and wireless configuration assessment: evidence collection, rule-based analysis and scanner imports.
• EvidenceGate — local integrity, HTTP capture-structure, CVSS and scope checks for security assessments.
• CWE613Study — retained data, analysis and executable session-lifecycle examples.
• Network Security Assessment Handbook — methodology, worked scenarios and protocol reference.
• Ethical Hacking Labs — 19 topic guides for isolated practice, with credited student examples.

CWE proposal — explicit session termination

I submitted Improper Enforcement of Explicit Session Termination to the CWE Program. The proposal is publicly tracked in the CWE Content Development Repository, issue #224, submission ES2609-7b54439f.

Status checked 25 September 2026: receipt acknowledged (Phase02-Ack-Receipt); evaluation pending. This is a proposal, not an assigned or accepted CWE entry. The linked issue is the source for subsequent status changes.

Session-lifecycle research

Logout Is Not Expiration: A Source-Aware Semantic Characterization of CWE-613, with Shahbaz Akhtar Siddiqui — manuscript submitted to IEEE Access. Research materials and project notes.

Build & automate

Python · PowerShell · Bash · Git

Platforms & environments

Kali Linux · Linux · Docker · Microsoft Azure

Security assessment & analysis

Burp Suite · Nmap · Wireshark · Metasploit

Also in the assessment workflow: Greenbone / OpenVAS and Active Directory.

• Evidence before conclusions. Keep observations, interpretations and confirmed impact distinct.
• Clear scope. Assess only authorized systems; keep private engagement material out of public examples.
• Useful artifacts. Prefer inspectable Python and PowerShell, documented limits and reproducible examples.

• Assess & investigate: Web and API security; network and wireless assessment; Windows, Active Directory and cloud configuration.
• Govern & improve: Information-security governance; risk assessment; control mapping; evidence quality and remediation tracking.
• Teach & research: Corporate training; practical labs; assessment methodology; reproducible security research.

Teaching materials retain contributor credit; research identifies its coauthors and publication status in the project repository. My earlier master's work on SDN-enabled IoT security is being revisited; it is not presented here as a new released tool or a published result.

OWASP · NIST Cybersecurity Framework · MITRE ATT&CK · PortSwigger Web Security Academy

These are independent third-party resources, not my projects or endorsements of my work.

LinkedIn · Website · ORCID · Email

For a tool issue, please use its repository's issue tracker with a synthetic, sanitized example—never live credentials or client evidence.