StreamVault
Video Streaming Platform
Built a video platform with resumable uploads, adaptive HLS streaming, real-time encoding, and JWT-based authentication.
ReactNode.jsMySQLFFmpeg
JWT-based authentication
Open to new opportunities · Jhelum, Pakistan
Mudassar Shabbir
Full-Stack MERN & Flutter Developer | Cybersecurity Enthusiast
Security-focused Computer Science student combining full-stack MERN and Flutter development with hands-on cybersecurity skills — penetration testing, vulnerability assessment, incident response, and digital forensics. Experienced in building scalable, secure web and mobile applications aligned with OWASP best practices.
Mudassar Shabbir
Cybersecurity Enthusiast
What I Do
Three disciplines, one professional.
I don't specialize in just shipping features — I specialize in shipping features that hold up under scrutiny.
Full-Stack Development
Building scalable web platforms end-to-end with the MERN stack and Laravel/PHP — from database schema to production-ready UI.
ReactNode.jsExpressMongoDBLaravelMySQL
Mobile Engineering
Cross-platform mobile apps in Flutter with Supabase backends — role-based dashboards, real-time data, and secure authentication.
FlutterDartSupabaseRealtimeRLS
Cybersecurity
Penetration testing and vulnerability assessment aligned with OWASP Top 10 — from Kali Linux tooling to documented remediation.
Kali LinuxBurp SuiteWiresharkOWASP Top 10
Core Toolkit
The languages, frameworks, and tools behind every project below.
Programming Languages
JavaC++JavaScriptPythonPHPDart (Flutter)
Development & Systems
MERN Stack (Node.js/React)Laravel/PHPFlutterMySQL/SQLLinux Fundamentals
Cybersecurity
Penetration TestingOWASP Top 10Vulnerability AssessmentCryptography & Secure DevNetwork SecurityNmapCaidoFFUFFeroxBuster
Security Tools
Kali LinuxBurp SuiteWiresharkGit/GitHubSupabase Auth & SecuritySplunkWazuh
Experience
Where I've applied it.
From defense-sector ERP systems to mobile security operations — hands-on roles that paired development with a security mindset.
Mobile Application Developer & Cybersecurity Manager (Intern)
CurrentOnlinecer Solutions Pvt LtdJuly 2026 – PresentServing as Mobile Application Developer & Cybersecurity Manager, applying Flutter development skills alongside cybersecurity best practices to support the company's mobile applications and security operations.
Software Development Intern
Pakistan Aeronautical Complex (PAC), Kamra6-week internshipCompleted a 6-week internship covering aircraft maintenance systems, intranet networking, and ERP integration within a sensitive defense environment. Built a MERN-stack Job Tracking System with role-based access control and secure authentication; mapped PAC's ERP modules with IT teams to strengthen system alignment and security.
Mediator
Cloud SolutionsServed as technical liaison between software engineers and clients, clarifying security and functional requirements and resolving conflicts to ensure secure project delivery.
Security Co-Head / Operations Lead / Secretary General
COMSATS Sports SocietyManaged event security and operations for university sports events, ensuring smooth execution while developing problem-solving and leadership skills.
Featured Projects
Built, shipped, and stress-tested.
Projects spanning the full stack, mobile, and offensive security — each one shipped with the same instinct: assume it will be attacked.
PadelPK
Court Booking Platform
Built a secure booking platform with role-based access, real-time slot availability, online payments, and race-safe double-booking prevention.
PHPMySQLJavaScript
Role-based access, race-safe booking
KnowledgeX
Knowledge Sharing & Request Management System
Built role-based dashboards with protected content-approval workflows, input sanitization, and OWASP-aligned access control.
LaravelPHPMySQL
Input sanitization, OWASP-aligned access control
AquaFlow
Water Delivery Platform
Built a role-based platform with secure authentication, order management, real-time tracking, and Supabase RLS.
FlutterSupabase
Supabase Row-Level Security
CONNECT
ISP Management System
Developed role-based dashboards, encrypted billing workflows, and Bluetooth-based invoice printing with session-controlled authorization.
FlutterSupabase
Encrypted billing, session-controlled authorization
EFS TaxVault
AI-Powered Invoice & Tax Vault
Built a mobile tax-document platform where users scan invoices and bank receipts for instant Gemini AI extraction, with multi-member business orgs, role-based approval via a dispute/rescan workflow, and one-click Excel export for filing.
FlutterSupabasePostgreSQLDeno (Edge Functions)Gemini AI
Row-level security + SECURITY DEFINER RPCs enforcing every permission boundary server-side
Web Application Security Testing
OWASP-Focused Penetration Testing
Conducted hands-on penetration testing on custom web applications; identified authentication and access-control flaws and applied OWASP Top 10 mitigations (CSRF, SQL injection, XSS) with documented remediation guidance.
Node.jsLaravelPHP
CSRF, SQL injection, XSS mitigation
Woodzilla
Built with precision. Designed for luxury.
Premium luxury furniture e-commerce platform with a modern responsive storefront, smart pricing, AJAX cart, wishlist, reviews, checkout, order tracking, WhatsApp integration, and a powerful admin dashboard.
Core PHP 8+MySQL/MariaDBHTML5CSS3Vanilla JavaScriptAJAXApacheChart.jsFont AwesomePDO
PDO prepared statements, bcrypt password hashing, session-based authentication, admin role protection, XSS-safe output handling, and file upload validation. Production should add CSRF protection, HTTPS, secure database credentials, and automated backups.
Prime Estates
Production-ready, white-label real estate platform
A modern real estate website and CMS for managing properties, projects, agents, content, branding, inquiries, and SEO from a centralized admin panel. Tech stack PHP 8+, MySQL/MariaDB, Vanilla JavaScript, HTML5, CSS3, PDO
PHP 8+MySQL/MariaDBVanilla JavaScriptHTML5CSS3PDO
Session authentication, CSRF protection, password hashing, and throttled login.
The Security Edge
I Don't Just Build Software. I Think About How It Can Break.
Every application I ship is built by someone who has also tried to break one.
OWASP Top 10
Penetration testing and vulnerability assessment applied across web applications — authentication flaws, access-control gaps, CSRF, SQL injection, and XSS, with documented remediation guidance.
Incident Response & Forensics
IBM Incident Response & Digital Forensics certified — trained to investigate, contain, and document security incidents methodically.
SOC & Monitoring
Hands-on experience with Splunk and Wazuh for log analysis and monitoring, plus Burp Suite and Wireshark for traffic and vulnerability inspection.
Kali LinuxBurp SuiteWiresharkSplunkWazuhOWASP Top 10
Certifications
Google Cybersecurity Professional CertificateIBM Incident Response & Digital ForensicsHands-On Web Application PentestingPractical Splunk for BeginnersHack the Planet 2–4 Cybersecurity Training Series
Contact
Let's build something secure.
Have a role, a project, or a security review in mind? Send a message and I'll get back to you.