# Ubaid-Ur-Rehman - Portfolio

> Full-Stack Engineer & Security Researcher from Nazimabad, Karachi, Pakistan (UTC+5). 15 shipped products, 20 disclosed vulnerabilities across 3 engagements, 12 F-Droid app audits, 3 upstream merges, EC-Council Hall of Fame 2026.

Every number above is checkable: each one links to a repository, a merge request, a published report or a certificate. The CV is served in four formats - HTML for a browser, Word for the applicant tracking systems that parse one, plain text for a script, and JSON Resume for a machine.

## Portfolio

- [Home](https://ubaid-ur-rehmanportfolio.vercel.app/): The whole portfolio as one continuous document: every project, engagement, audit and certification, with a section menu that tracks the page.
- [About](https://ubaid-ur-rehmanportfolio.vercel.app/about): Background, the skill cards with the artefact behind each one, the career timeline, and answers to the questions a recruiter actually asks.
- [Work](https://ubaid-ur-rehmanportfolio.vercel.app/work): Every shipped project — security tools, products and experiments — with a case study for each one.
- [Writing](https://ubaid-ur-rehmanportfolio.vercel.app/writing): Three long-form reports written for this portfolio and the dated Medium archive, newest first.
- [Services and pricing](https://ubaid-ur-rehmanportfolio.vercel.app/services): Published, fixed-scope prices for API route reviews, Android app reviews, web application penetration tests, access-control reviews, dependency and CI reviews, and development work.

## CV

- [CV (HTML)](https://ubaid-ur-rehmanportfolio.vercel.app/cv): The printable CV, generated from the same data as the rest of the site. Designed to be read on screen and printed to PDF.
- [CV (plain text)](https://ubaid-ur-rehmanportfolio.vercel.app/cv.txt): The same CV as a plain-text document, 80 columns wide, ASCII only, every URL printed in full. For an applicant tracking system, a screening script or a terminal.
- [CV (JSON Resume)](https://ubaid-ur-rehmanportfolio.vercel.app/cv.json): The same CV as JSON Resume, with ISO 8601 dates, an availability block and pre-computed ATS keywords, years of experience and highest education.
- [CV (Word document)](https://ubaid-ur-rehmanportfolio.vercel.app/api/cv.docx): The same CV as a DOCX, for the applicant tracking systems that parse a Word file more reliably than a PDF.

## Security

- [Security overview](https://ubaid-ur-rehmanportfolio.vercel.app/security): Disclosed vulnerabilities, the EC-Council Hall of Fame 2026, and how the research is verified.
- [Open source contributions](https://ubaid-ur-rehmanportfolio.vercel.app/security/contributions): The upstream merge requests across gitlab-shell, Inkscape, Wireshark, GitLab Docs and OpenMW, with their live status.
- [F-Droid audits](https://ubaid-ur-rehmanportfolio.vercel.app/security/audits): Twelve apps audited for F-Droid inclusion with the report published on each merge request, plus the inclusion submissions and recipe updates.
- [Certifications](https://ubaid-ur-rehmanportfolio.vercel.app/security/certifications): EC-Council Hall of Fame 2026, the IBM Bob 2.0 hackathon certificate, Cisco Networking Academy credentials and instructor-led certifications.
- [Live activity](https://ubaid-ur-rehmanportfolio.vercel.app/security/activity): The live commit and event feed, the Snowflake bridge network, the impact monitor, the reconnaissance scanner, and the password, cipher and fingerprint tools.

## Machine-readable

- [llms.txt](https://ubaid-ur-rehmanportfolio.vercel.app/llms.txt): This index: the site, one link per page, with what is on each one.
- [llms-full.txt](https://ubaid-ur-rehmanportfolio.vercel.app/llms-full.txt): The entire portfolio as one Markdown file: profile, skills with their proofs, projects, engagements, contributions, certifications and writing.
- [Portfolio API](https://ubaid-ur-rehmanportfolio.vercel.app/api/portfolio): The portfolio as JSON, with CORS enabled.