About

avatar

Ali Taqi Wajid

A CTF Player & DevSecOps Engineer
mailMailgithubGitHublinkedinLinkedinxX

👋 I'm Ali Taqi a.k.a TheFlash2k ⚡

A Cyber Security graduate with an avid interest in creating and breaking things. A passionate programmer, hacker, CTF player, music producer and a gamer 🎮.

Skills

  • Programming Languages: Python, C, C++, C#, JavaScript, Go, Ruby, Bash, Batch, PowerShell and a little bit of Nim
  • Tools & Frameworks: Docker, Ansible, Terraform, Kubernetes, Puppet, Chef, Vagrant, Grafana, Prometheus, Meson/Ninja/CMAKE, OpenStack
  • Platforms: Linux, Windows, AWS, Azure, GCP, DigitalOcean, Vercel, Cloudflare

Experience

  • Application Security Engineer at Trustline (March 2023 - Present) [Riyadh, Saudi Arabia [Remote]]
  • Application Security Engineer at Horizon Tech Services (December 2021 - June 2023) [Islamabad [Hybrid]]
  • Junior Devops Engineer at Red Fort Technologies (August 2022 - October 2023) [Remote]
  • Network & Systems Security Analyst at Arrow Consolidated (January 2021 - January 2022)

Education

Certifications

  • Offensive Security Certified Professional (OSCP)
  • eLearnSecurity Certified Professional Penetration Tester (eCPPT)
  • Certified Ethical Hacker (Practical) (CEH | P)

Achievements

  • 1st Place in NasCon'24 organized by FAST University, on-site in Islamabad (2024)
  • 2nd Place in PuCon'24 organized by Punjab University, online (2023)
  • 1st Place in Digital Pakistan Cyber Security Hackathon organized by MoITT and IGNITE, on-site in Islamabad (2023)
  • 1st Place in AUPCTF'23 organized by University of Peshawar, online (2023)
  • 2nd Place in PuCon'23 organized by Punjab University, online (2023)
  • 1st Place in NasCon'23 organized by FAST University, on-site in Islamabad (2023)
  • 1st Place in NasCon'22 organized by FAST University, on-site in Islamabad (2022)
  • 4th Place in ICYWSC'22 organized by FAST University, on-site in Islamabad (2022)
  • 2nd Place in Digital Pakistan Cyber Security Hackathon organized by MoITT and IGNITE, on-site in Islamabad (2021) [Network attacks and Exploitation]
  • 3rd Place in Digital Pakistan Cyber Security Hackathon organized by MoITT and IGNITE, on-site in Islamabad (2021) [Speed Programming]

Projects

  • CTFd Flag Validator - A CTFd plugin to generate dynamic flags for each team (requires plugin). Also includes Auto-Bans of teams in-case of Flag Sharing.
  • CY243-L - All the lab manuals, tasks and their solutions for the course CY243 - Penetration Testing along with a Teacher's manual for Lab Setup will be kept here.
  • Raidware - A Complete Command and Control (C2) Framework capable of generating payloads for all the major operating systems i.e. Windows, Linux and macOS. This was developed as the Final Year Project for my Bachelors degree.
  • SillyRAT - This was developed with Shameer Kashif (a dear friend of mine) as a part of our OOP Course Project. It is a cross-platform Remote Access Trojan capable of performing stealth operations and AV Evasion written originally in C++ and ported to Python.
  • bRAT - A C++ based cross-platform Remote Access Trojan capable of performing stealth operations and AV Evasion. (Deprecated and left out)
  • METH - A Python3 based Packet Sniffer with capabilities to sniff raw TCP, UDP, HTTP, ICMP, FTP, SSH, SFTP packets and filter them using Berkley filters
  • RevShell - A Python3 based reverse-shell generator. It is capable of generating reverse shell in multiple different languages such as PHP, Python etc
  • Netflix Account Generator - A bug allowed us to generate unlimited Netflix accounts, so I made a script to automate it. It was patched a few days after I wrote the script so I decided to make it public. (Doesn't work now.)

Additional Experiences

Reach out to me