Red Teamer | Penetration Tester | CTF Player

LPT (Master) | C|PENT v2 | CNSP | CRTOM | CAPIE | CWAP | CAP

View Services Download CV

About Me

Dedicated cybersecurity professional with expertise in offensive security

Zabed Ullah Poyel

I'm a Red Teamer and Penetration Tester with proven real-world impact — critical vulnerabilities discovered and reported at NASA, Amazon, Stanford University and RMIT University through active bug bounty work on HackerOne and Bugcrowd. Certified as an LPT Master and CPENT v2 (EC-Council), I specialize in Web, API, AWS Cloud, Network and AI/LLM application security, combining hands-on penetration testing with Red Team operations and continuous CTF competition. I'm dedicated to ethical hacking, clear technical reporting and mentoring the next generation of security researchers.

Keep safe exploring the internet
Secure your business and website
Connect to ultra-fast private servers

Achievements & Experience

Showcasing my competitive achievements, honors, and professional experience

CTF Achievements

CUET StealthFlags 2025 National CTF: 6th
MIST Cyber Drill 2025: 13th
Knight CTF 2026: 15th
BDSec CTF 2025: 22nd
BCS ICT FEST 2025: 24th
Bugcrowd x Black Hat USA 2025 CTF: 27th

Awards & Recognition

Hackers4Humanity Graduate: Recognized at HackerHalted 2026 (EC-Council)
Letter of Recognition (LOR): NASA (2025)
Coins Awards: Top 100 performers at Bugcrowd Black Hat USA CTF 2025
Hall of Fame: NASA, University of Canterbury
Thanks Received: Amazon, TECNO SRC, MTN Group, ION Group

Experience

Penetration Tester: Metaphor Security LLC
Red Team Lead: The Black Onion
Support Mentor: Cyber Bangla Academy

Professional Services

Comprehensive cybersecurity solutions to protect your digital assets

Vulnerability Assessment & Penetration Testing (VAPT)

Automated vulnerability scanning
Manual penetration testing
Detailed technical reports
Remediation guidance

Web Application & API Testing

OWASP Top 10 coverage
API security testing
Business logic testing
LLM / AI-based app security

Network Penetration Testing

External network testing
Internal network assessment
Wireless network testing
Network infrastructure security

AWS Penetration Testing

IAM:Identity and Access Management
VPC: Virtual Private Cloud
EC2: Elastic Compute Cloud
S3: Simple Storage Service

CMS Security Audits

Plugin vulnerability assessment
Configuration security review
Custom code analysis
Update and patch verification

OSINT & Digital Reconnaissance

Social Media & Surface Web Profiling
Data Breach and Leak Analysis
Employee & Organization Recon
Dark web and deep web Monitoring

Gallery

Showcasing my certifications and professional activities

Phoenix Summit 2026 Powered by BRAC Bank PLC

Phoenix Summit 2026 Powered by BRAC Bank PLC

Phoenix Summit 2026 Powered by BRAC Bank PLC

Coins Awards

Coins Awards

Top 100 performers at Bugcrowd Black Hat USA CTF 2025

The Team Phoenix 2025

The Team Phoenix 2025

NCC Bank PLC Presents Phoenix Summit 2025 - Powered by Dhaka Bank PLC – Day 3: Red Team Day

The Team Phoenix 2025

The Team Phoenix 2025

NCC Bank PLC Presents Phoenix Summit 2025 - Powered by Dhaka Bank PLC – Day 3: Red Team Day

CYBER INVASION 25

CYBER INVASION 25

BUGHUNT2026

BUG HUNT 2026

BUGHUNT2026

BUG HUNT 2026

WTISD Hackathon 2025

WTISD Hackathon 2025

World Telecommunication and Information Society Day 2025 HACKATHON 2025

WTISD Hackathon 2025

WTISD Hackathon 2025

World Telecommunication and Information Society Day 2025 HACKATHON 2025

Certified Penetration Testing Professional v2

Certified Penetration Testing Professional v2

Verification Link: https://aspen.eccouncil.org/verify

Licensed Penetration Tester (Master)

Licensed Penetration Tester (Master)

Verification Link: https://aspen.eccouncil.org/verify

Certified AppSec Practitioner v2 (CAP)

Certified AppSec Practitioner v2 (CAP)

Verification Link: https://candidate.speedexam.net/certificate.aspx?SSTATE=am4131EniU8ntjp4bO5mXZMnDyGAP864Rz8dD05VCVujh8AbMoeXnEEgenEj9ZqP/nrQ387Xvg+bCYr+/WhRaTfblbcYBH4HtNL2vgi5DIk=

CodeAlpha Internship

CodeAlpha Internship

Verification Link: https://www.codealpha.tech/Certificate/Code-Verification.html

Certified Network Security Practitioner (CNSP)

Certified Network Security Practitioner (CNSP) - Certificate

Certificate Link: https://candidate.speedexam.net/certificate.aspx?SSTATE=am4131EniU8ntjp4bO5mXcStqws6gqNFCsW8Yaw832TCYCNG8pL38dmRlGV5qDzfmWR23Xt78bpL0AN4FI8SFhPXs4KRsrJn4u2+ieYtjUg=

Web Pen-testing & Bug Hunting

Certified Web Applications Pentester (CWAP) - Certificate

Certificate Link: https://cyberlandsec.com/certificate/d780fc79/

Certified Cybersecurity Educator Professional (CCEP)

Certified Cybersecurity Educator Professional (CCEP)

Certificate Link: https://courses.redteamleaders.com/exam-completion/97ad94ed8001f17c

Web Pen-testing & Bug Hunting

Web Pen-testing & Bug Hunting - Certificate

Cyber Bangla Academy - OWASP Top 10, Code Review, API Penetration Testing, CVE Analysis and Professional Report Writing

Certified Ethical Hacker & Penetration Tester (CEHPT)

Certified Ethical Hacker & Penetration Tester (CEHPT) - Certificate

Certificate Link: https://cyberlandsec.com/curso/ethical-hacking-penetration-tester/

CAPIE - Certified API Hacking Expert

Certified API Hacking Expert (CAPIE) - Certificate

Certificate Link: https://thexssrat.podia.com/certificates/cert_4YvTkDel

API Penetration Testing

APIsec University Certificate

Certificate Link: https://www.credly.com/badges/47f0c39d-7e70-4435-8a92-8768ebe96531/public_url

EHE Certificate

EHE Certificate

Certificate Link: https://learn.eccouncil.org/certificate/e8148972-3921-441a-80ab-3ab03b94e4c4?logged=true

Web Development

Web Development

Web Development (HTML5, CSS3, Bootstrap 4) – Bohubrii

NASA

Subdomain Takeover

Stanford University

Stanford University

Arbitrary File Read (CVE-2025-30208)

Amazon

Amazon

Open Redirect

MTN Group

MTN Group

Improper Authorization

MTN Group

MTN Group

Improper Authorization

MTN Group

MTN Group

Improper Authorization

ION Group

ION Group

XSS

University of Canterbury

University of Canterbury

Cryptographic Weakness

RMIT University

RMIT University

Sensitive Data Exposure

Kahf

Kahf

3 Bug Report

TECNO Rewards

TECNO Rewards

Thank You Badge Rewards (Nov 26, 2024)

CTF Coins

Coins Awards

Top 100 performers at Bugcrowd Black Hat USA CTF 2025

CTF Certification

CTF Certification

BCS ICT FEST 2025: 24th / 254 Teams

CTF Certification

CTF Certification

KnightCTF 2025: 68th / 1,200+ Teams

CTF Certificate

CTF Certificate

The Team Phoenix CTF 2025: 29 / 300+ Teams

CTF Certificate

CTF Certificate

BDSec CTF 2025: 22th / 642 Teams

CTF Certificate

CTF Certificate

BlitzvCTF 2025

CTF Certificate

CTF Certificate

World Wide CTF 2025

Let's Work Together

Ready to strengthen your cybersecurity posture? Get in touch today.

Email

zabedullahpoyelcontact@gmail.com

LinkedIn

linkedin.com/in/zabed-ullah-poyel

GitHub

github.com/XploitPoy-777

Medium

medium.com/@zabedullahpoyel