Penetration testing
Learning to assess systems the way an attacker would, so weaknesses are found and fixed before they are abused.
Penetration testing, vulnerability research, and the curiosity to understand how systems work — and where they break.
I'm Saim Sohail, a young, growing cybersecurity professional focused on penetration testing and vulnerability research.
I build my skills through structured coursework and hands-on practice: EC-Council's Ethical Hacking, Network Defense and Digital Forensics Essentials, alongside courses from IBM, Packt and the University of Maryland.
I approach security with critical thinking: understanding how systems work so I can find where they break. I practise through CTF challenges and bug bounty programs, publish IT and security tools on GitHub, and write on Medium about cybersecurity and AI in plain language for non-technical readers.
The areas I am building depth in right now, each one learned through courses and hands-on practice.
Learning to assess systems the way an attacker would, so weaknesses are found and fixed before they are abused.
Understanding how software and networks fail, and why, by studying real vulnerability classes.
Studying how networks are protected, monitored and hardened, from the defender's side of the table.
Learning how to trace what happened on a system and preserve evidence properly.
Practising on challenges and bug bounty programs to turn theory into habit.
Explaining cybersecurity and AI in plain language on Medium so non-technical readers can follow.
Tools and languages I use and learn through research, coursework, and building.
Learn how the system is meant to work first.
Look for where assumptions break.
Confirm a finding is real before claiming it.
Write it up clearly so it can be fixed.
Structured learning alongside regular hands-on practice, from foundational security principles to tools and investigation.
3 courses: Ethical Hacking, Network Defense and Digital Forensics Essentials.
Four courses through IBM's learning programs.
One course through Packt.
One course through the University of Maryland.
Tools, experiments, and explanations published as part of an ongoing learning journey.
An interactive audit tool for Windows and Linux. It profiles loopback ports, checks firewall and anti-malware status, and can look up OS-specific CVEs from the NIST NVD, then writes HTML and JSON reports.
Explore repositoryA raw-socket port scanner written in Rust with Nmap-style flags, SYN, connect and ACK scans, adaptive rate control and native JSON output.
Explore repositoryOpen repositories with tools and programs for IT and cybersecurity, built while learning.
Medium articles on cybersecurity and AI, written in plain language for non-technical readers.
My cybersecurity channel.
Open to collaborations, learning opportunities and conversations about security.