Open to junior security analyst and security engineer roles — remote or relocation, replies within a day
Ubaid-Ur-Rehman
Security Researcher & Full-Stack Builder — Karachi, Pakistan
2+ years · EC-Council Hall of Fame · 20 disclosed vulnerabilities · 3 open-source merges
Available for projects
Verified Security Research
20 disclosed vulnerabilities across 3 engagements · 6 rated Critical · 1 Hall of Fame listing
EC-Council (CodeRed)
9 vulns · 3 Critical9 vulnerabilities found (3 Critical). Acknowledged same day. Hall of Fame 2026 + Certificate of Appreciation.
PriceOye
5 vulns · 3 Critical PII5 vulnerabilities found, including 3 Critical PII leaks. Remediation confirmed within 72 hours.
Waqar Electronics
6 vulns · XSS-to-ATO6 vulnerabilities found including one Stored-XSS-to-ATO chain via insecure session cookies.
Every finding reported through proper channels — technical details withheld by policy.
Work
Tools and products
shadowaudit
Security ToolCLI that turns undocumented API routes into reviewable security context, with SARIF output your CI already understands.
KarobarX
ProductTrust-first social commerce platform for Pakistan, where a verified handshake replaces the anonymous listing.
Hidayah OS
ProductPrivacy-hardened Linux distribution with a DNS-level firewall that ships with the blocking already done.
Pak Books
ProductFree bilingual digital library built for students in Pakistan, funded by the team that maintains it.
Noor Connect
ProductIslamic companion app with location-aware prayer times, published on F-Droid with no tracking.
Neuron-Encrypt
Security ToolFile encryption in Rust with key transparency, so you can prove what was encrypted and with which key.
9 further projects — Android DNS tooling, offline medical reference, Nostr, and agent experiments — are listed on the full work page.
Outcomes you can verify
Daniel PsenicniFounder, BS Studio
Paid engagement — bilingual agency platform designed, built and deployed end to end.
- 3Merged into projects he does not own — Inkscape, Wireshark, GitLab Shell
- 11Apps audited as an F-Droid contributor, report published on each MR
- 20Vulnerabilities disclosed responsibly
- 3Engagements, all remediated
LET'S WORK
TOGETHER
Two different conversations, depending on what you need.
Security Engagements
Book an audit or a disclosure call. Engagements are handled under strict confidentiality.
Response < 24h · Available now
Schedule via EmailDevelopment Projects
Got a build idea or a freelance project? Android apps, web apps and CLI tools are all in scope.
Response < 24h · From $20/hr
EmailLet's Build Something
Android apps · Websites · Security audits
Need a secure Android app, a blazing-fast website, or a thorough security audit? Let's discuss your project.
Typical response < 24h · Available now
GitHub
@theredhacker0345
X
@Ubaid4tech
GitLab
@theredhacker0345
shadowaudit
Dashboard
/in/ubaid-ur-rehman-979623401/
Responsible Disclosure
All findings reported through proper channels. Available for bug bounty and private security consulting.