hasan@lahore:~$ whoami

HASAN
SHABBIR

I am 20, from Lahore. Certified Ethical Hacker at 16, Security+ at 17. I break into systems so strangers can not, then I go make music about everything else.

I spend my days fixing what is vulnerable, riffing on the ineffable, and writing what I can not say out loud :)
Probably me!?
Scroll Open to projects

Timeline

The receipts, so far.

git log --oneline
9f2c4a1nowThis site. Designed it, built it, shipped it.
a4f8c2e19Existential crisis. Would not recommend.
d1b7e3f18Wandered aimlessly. The aha teenager phase.
8d4e2b917Started making music.
1a7c3e517Security+ (CompTIA).
f6b8d2c16CEH v11 (EC-Council).
$ ▊

About

The short version.

Hi, I am Hasan. I am 20, from Lahore, and I live in two worlds that were never supposed to meet.

I got into cybersecurity young. CEH at 16, Security+ at 17, along with other certs that stay between me and my employers. I started on the rebellious side of the fence, poking at things for the ideology of it, then realized I would rather protect systems than break them for no reason. I regret the pointless phase. I went ethical early and never looked back. Since then it has been blue team work: incident response, threat hunting, making systems harder to kill.

The other half is music. I produce, compose, and write across ambient, indie pop, electronic, and alternative. Most of my tracks are still unreleased, and I plan to change that. Music started as a sanctuary after I lost my father, and it stayed one. It is how I process the things I can not say out loud.

Then there is the writing. Poetry, prose, ramblings, notes on film and culture. Mostly private. One day, a book. Probably.

Wanna talk?

Certifications

  • CEH v11
    EC-Council · earned at 16
  • Security+
    CompTIA · earned at 17
  • + more
    kept private · between me and my employers

For professional and security reasons, the rest remain primarily between me and my employers.

Skills

What I actually do.

Three crafts, one brain.

Defense

Blue Team

I defend. Incident response, threat hunting, SIEM and log analysis, forensics, security architecture. The calm, unglamorous work of making sure the bad day never happens.

Incident ResponseThreat HuntingSIEMForensicsEDRRisk Management

Offense, with permission

Red Team

I attack only the systems I am invited into. Penetration testing, vulnerability assessment, exploit development, wireless and cloud. I think like the adversary so you never have to meet one.

PentestingVuln AssessmentExploit DevCloudWirelessPrivilege Escalation

Automation

Security Engineering

I build. Python and Bash, cloud security, DevSecOps, applied cryptography. Automate the boring parts so humans can handle the interesting threats.

Python / BashAWSDevSecOpsApplied CryptoIaCPacket Analysis

Music

Sanctuary

The music is where I do not perform a role. Written, performed, and produced by me. Tap a cover to play it.

full catalogue, documented on musicbrainz.

Contact

Your move, chief.

Could be anything. My inbox is open.

I am always open to discussing new projects in cybersecurity, music production, or writing. If you have an idea, a challenge, or just want to connect, reach out. I will get back to you as soon as I can.

I typically respond between 10:00 AM to 9:00 PM PKT