AI Security · Offensive Security · Threat Intel

Muhammad Haseeb Ashfaq

> aspiring_ai_pentester

I break things to understand how they hold together. Year 13 student with an offensive-security and threat-intelligence foundation, now moving into AI security and AI pentesting, through CTFs, research, and hands-on labs. Based in Dubai.

View projects → Get in touch → Download CV ↓

// RECON_FEED

25.2048°N 55.2708°E · DXB · TGT_LOCKED

30+CTF challenges built

7Challenge categories

18TryHackMe rooms

Top 35%THM global rank

About

SUBJECT PROFILE

FILE · HA/2027 ACTIVE

Aliaskaido

LocationDubai, UAE

StatusYear 13 · BTEC IT Level 3 (Distinction)

SchoolThe Westminster School, Dubai

FocusAI · Offensive Security · Threat Intel

NowSOC L1 + Jr Pen Tester path

// TRYHACKME kaid0x

My core is offensive security: the web and network pentesting, OSINT, and threat-intelligence work a real engagement runs on. AI is the layer I'm building on top of that, both a system I'm learning to test, and a tool I'm learning to test with.

I'm Haseeb, a self-directed cybersecurity student focused on where offensive security meets AI. Most of what I know I've learned hands-on: playing CTFs, breaking web apps, and starting to dig into how AI systems get attacked and defended.

At Westminster I'm working through the BTEC IT Level 3 National Diploma with distinctions across the board, and I recently finished a Cambridge research paper on AI-powered surveillance and privacy, which pushed me deep into AI ethics, security, and cyber-geopolitics.

Outside the classroom I co-built my school's first CTF/Hackathon, compete in web-exploitation and OSINT challenges, and I'm prepping for CompTIA Network+. The goal from here: specialize in AI security and AI penetration testing, on top of a solid offensive-security base.

AI Security AI Pentesting Offensive Security Threat Intelligence OSINT

Projects

CASE FILES

CASE #001 · FLAGSHIP2026

WSH'26 · Westminster Hackathon & CTF

Organizer & CTF Challenge Developer

Co-organized my school's first intraschool CTF & Hackathon for 30+ participants, and built the whole challenge set and the infrastructure it ran on. End to end: design, cloud deployment, and live administration.

30+ custom challenges across 7 categories
Deployed CTFd on Google Cloud Platform
Dockerized multi-service stack (Nginx · MariaDB · Redis)
Configured VPC networking & firewall rules
Built web challenges in Python & Flask
Categories: Web · Rev · Crypto · Stego · Forensics · OSINT · Misc

CTFdGCPDockerFlask Burp SuiteGhidraWireshark

CASE #002 · BUILD2026

Raspberry Pi Security Homelab

Self-hosted · Linux · Networking

A security-focused homelab built from scratch on a Raspberry Pi 3B, running headless on Pi OS Lite. The repo documents every major decision: what was tried, what failed, and why the final approach won, not just the configs.

Pi-hole + Unbound: DNS sinkhole with a local recursive DNSSEC resolver
Tailscale mesh VPN: remote access through double-NAT, no port forwarding
Docker-hosted services with Uptime Kuma monitoring & ntfy alerts
SSH hardening: key-only auth + fail2ban; nightly rsync backups

LinuxDockerPi-holeUnbound TailscaleDNSSECrsync

View repository →

CASE #003 · RESEARCH2026

AI Surveillance & Privacy

Cambridge International Project (CIPQ) · A*

A research paper on how far AI-powered surveillance can go in preventing political conflict in the USA while protecting individual privacy, a deep dive into AI ethics, digital security, and cyber-geopolitics.

AI EthicsPrivacyResearch

CASE #004 · OPS2026

UMassCTF · PinkHatHackers

Web Exploitation & OSINT

Competed in UMassCTF, the University of Massachusetts Amherst's annual capture-the-flag, with the PinkHatHackers team, focusing on web exploitation and OSINT challenges against a global field.

Web ExploitOSINTCTF

CASE #005 · TRAININGONGOING

TryHackMe Pathways

Pre-Security ✓ · SOC L1 & Jr Pen Tester (in progress)

Structured, hands-on training through TryHackMe: Pre-Security completed, now working the SOC Level 1 and Junior Penetration Tester paths toward practical offensive skills.

Blue+RedLabsPentest

CASE #006 · EXPERIENCEPAST

IT Intern · SPM Shipping DMCC

Internship

Early hands-on IT experience inside a working business, exposure to real operations, systems, and the day-to-day of keeping infrastructure running.

IT SupportOperations

CERTIFICATIONS & PROGRAMS

Fujitsu: Cybersecurity Amazon: Solutions in the Cloud Amazon: Verifying AI Knowledge Heriot-Watt: Race Engineer Program Harvard CS50x: Intro to CS (in progress) CompTIA Network+ (target 2026)

Skills

CAPABILITY MATRIX

Offensive Security

Web exploitation: CTF-tested attack chains
Penetration testing fundamentals & methodology
Challenge design across Rev, Crypto, Stego & Forensics

AI Security

AI / LLM attack surface: prompt injection, jailbreaks (learning)
AI ethics, privacy & surveillance research (CIPQ)
Using AI to run & assist pentests (exploring)

Threat Intel & OSINT

MITRE ATT&CK: mapping & APT campaign analysis
OSINT investigation & collection
Network security fundamentals

Tooling & Infra

Burp Suite · Ghidra · Wireshark · Nmap
Docker & multi-service deployments on GCP
CTFd · Nginx · MariaDB · Redis

Code & Dev

Python: security automation & OSINT scripting
Flask for web challenge apps
Git & GitHub · VS Code

Writeups

FIELD NOTES

CTF / WRITEUPS2026

WSH'26 · Official Write-ups LIVE

Full write-ups for Westminster's first intraschool CTF, 30+ challenges across Web, Crypto, Reverse Engineering, Forensics, Steganography, OSINT and more.

Read →

CTF / INFRA2026