Zeshan Amin — cyber security instructor and penetration tester, Bahawalpur Pakistan
personnel_file // 0x2A

Zeshan Amin

CYBERSECURITY INSTRUCTOR // OFFENSIVE SECURITY PRACTITIONER

Offensive security practitioner with practical experience in penetration testing, API security assessments, and red-team-oriented methodologies. I've worked across identifying vulnerabilities, analyzing attack surfaces, and building structured approaches to simulate real-world adversarial behavior — alongside serving as a Data Security Analyst protecting organizational data assets.

I mentor cybersecurity students locally and internationally, focused on practical penetration testing and API exploitation, and stay active on HackerOne refining vulnerability research skills.

experience_log

Professional experience

Jan 2026 — Present

Bug Bounty & Security Research

HackerOne
  • Active participant in vulnerability discovery and responsible disclosure
  • Focus areas: API logic flaws, authentication bypass, misconfigurations
Mar 2024 — Present

Cybersecurity Instructor & Program Lead

CyberZest
  • Delivered structured penetration testing training to 35+ students
  • Mentored 2 advanced Red Team students (France & Saudi Arabia)
  • Designed and launched the Web API Bug Bounty course
  • Developed practical, lab-based offensive security curriculum
May 2024 — May 2025

Data Security Analyst & Team Lead

Giga House Agency
  • Managed and secured organizational data assets and internal infrastructure
  • Implemented access control policies and system hardening practices
  • Conducted internal security assessments and vulnerability identification
  • Led a small technical team for security implementation and issue resolution
github // zexhanamin

Projects

Open-source tools built for offensive security practice, automation, education — and a few things built simply because they were missing.

ELECTRON · WINDOWS + ANDROID

Zest Downloader — Multi-Connection Download Manager

A download manager that splits a file into up to 8 parallel byte-range segments, verifies the server really honours Range before doing it, and keeps partial segments on disk so pause/resume survives closing the app. BitTorrent and magnet links, a persistent SQLite queue, video downloads from nine sites, and a Chrome extension that hands downloads over from the browser. An Android build shares the same engine.

github.com/zexhanamin/zest-downloader →
ANDROID · COMPUTER VISION

Zest Cam — Pose-Guided Pro Camera

A free Android camera that draws any reference photo's pose over the live viewfinder as a skeleton, outline or sketch, scores how closely you match it, and can fire the shutter itself. Manual ISO, shutter, Kelvin white balance and focus on a lens-ring dial, RAW (DNG), a live histogram, 100× zoom by burst-merging the sharpest frames, half-second action pre-capture, and 43 LUTs. Nothing leaves the phone.

github.com/zexhanamin/zest-cam →
WINDOWS · SYSTEM TOOLING

Zest Updater — Portable Driver Updater

One portable executable for Windows 10 and 11 — no install, no ads, no bundled software. Finds outdated and broken drivers (including code 43 and code 10 devices), and pulls every driver from Microsoft Windows Update rather than a third-party driver site. Makes a System Restore point before each install, never downgrades a newer driver, and never reboots on its own.

github.com/zexhanamin/zest-updater →
JAVASCRIPT · DESKTOP

ZEX — Secure File Encryption App

A lightweight, fully offline desktop app for encrypting/decrypting files using AES-256-GCM authenticated encryption. Multi-file support, custom/auto-generated key management, 3-pass secure wipe, and a full audit log — built from scratch with a custom GUI.

github.com/zexhanamin/zex →
PYTHON · NETWORKING

Multithreaded Network Port Scanner

A high-performance recon tool implementing multithreading for fast host discovery and port scanning, with structured JSON output — built to demonstrate Python sockets and concurrent programming.

github.com/zexhanamin/Network-Port-Scanner →
BASH · SOCIAL ENGINEERING

PHISHPRO — Phishing Simulation Toolkit

A Bash-based framework for lab environments and cybersecurity training, providing customizable phishing pages and workflow scripts to replicate social engineering scenarios ethically.

github.com/zexhanamin/phishpro →
PYTHON · EDUCATIONAL DEMO

Demo Keylogger

An educational demo built to teach how input-monitoring malware works at a conceptual level, for classroom and awareness use in controlled environments.

github.com/zexhanamin/demo-keylogger →
competencies

Core technical skills

Offensive Security

Web App Pentesting API Security Testing External Network Pentesting Phishing Simulation Red Team Methodologies OSINT & Recon Post-Exploitation

Tools & Platforms

Burp Suite Pro Nmap ffuf Metasploit Wireshark Postman Gophish AWS

Scripting & Systems

Python (Strong) Bash Kali Linux BlackArch Wifislax Custom tool dev
certifications

Certifications & training

Practical Ethical HackingHeath Adams — TCM Security
Practical Web HackingAlex Olsen — TCM Security
Practical API HackingAlex Olsen — TCM Security
Practical Bug BountyHeath Adams — TCM Security
Practical Phishing CampaignsAaron Wilson — TCM Security
External Pentest PlaybookHeath Adams — TCM Security
Mobile Application Penetration TestingAaron Wilson — TCM Security
OSINT FundamentalsHeath Adams — TCM Security
Python 101 & 201 for HackersRiley Kidd — TCM Security
Beginner's Guide to IoT & Hardware HackingAndrew Bellini — TCM Security
CEH v13 TrainingVision Training System
CEHPunjab Skills Development Fund
education

Education

2024 — 2028

BS Cyber Security

Islamia University of Bahawalpur · Current CGPA 3.71

2022 — 2024

ICS (Computer Science)

BWP Board · 862 / 1200