Interview With Shawar Khan - Security Researcher From Pakistan

Hello Readers, in Techmedia NG interview series, Today we have Shawar Khan an Independent Security Researcher from Pakistan, Listed among Top Companies like Google, Microsoft, Sony, Ebay and so on. He's just here to advice the newbies coming into the field of Penetration Testing some advice. Just take your time :)

Also Read: Interview With Penetration Testers And Ethical Hackers From Around The World



Hello, Shawar Introduce YourSelf To Our Readers

Hi everyone! I am Shawar Khan, A Security Researcher and an Ethical Hacker from Pakistan. I got acknowledged by many top well-known companies like Google , Microsoft , Oracle , Sony , Nokia , Ebay , Amazon and many other sites. I am listed in +65 Hall of Fames inclduing 3 times in Microsoft , Google and Ebay. Viewers can see all of my hall of fames here

How You Started The Journey As A Security Researcher?

As hacking was my interest from young age so i was attracted to Information Security and wanted to become a white hat hacker. At start, i reported bugs and security flaws to many famous companies. I started to gather information from different resources so i can learn more about new things and i kept doing this and reported top companies like Google and Microsoft and also got rewarded by many companies. This is how i started my journey as a security researcher.

When Did You Start Hacking And Tell Us About Your Experience?

Well, i started Hacking before a year, i was a black hat hacker at the beginning. By doing this i got experience about the exploitation of different web application vulnerabilities like SQLI , RCE and some others. I compromised many systems and web applications but it was like the same thing repeating again and again. I learned much about the exploitation and the dark side of Hacking now it was time to switch to White Hat. As i already got experience of the Black Hat i was able to use those same tricks and methods to secure systems instead of damaging it. It was a very great experience for me as i learned both sides of this field.

How Did You Start Learning Hacking And Who Taught You?

To be honest, now a days no one is willing to teach someone hacking, this is what i have experienced in my life. I started learning it by looking at different articles on the internet and by gathering information from different resources. By learning about different methods of exploitation and methods of patching different security flaws i learned much from online resources and web sites. Books also plays an important role in learning these kind of things.

Which Website/System Did You First Break Into?, What's The Vulnerability?

I broke into many Systems and websites when i was a black hat. I don't exactly remember the website or company but the vulnerability i exploited was an SQL Injection and Remote Code Execution in a website. That was how i broke into the first website.

What Advise Will You Give To Beginners Coming Into This Field?

Most of the people want to start this field of Hacking, most of them don't know where to start. Most people are used to be a black hat as they don't know more about the ethical side of Hacking. There are many article on Black Hat Hacking which are ruining the people to be on the bad side. To get started in this field first of all you need to get as much knowledge and information as you can because knowledge is the key to success. Without knowledge and information you won't be able to know what you are doing. Learning about different security flaws and different attacks will help you know more about this field.I'd suggest the beginners to choose the Ethical side, White Hat Hacking if they want to be in the field. Getting reputation and working positively is much better than doing crime and getting behind the bars.

Is Programming Language Really Important, Why? And Which Language To Learn

Programming is not really required to be a Hacker. But its always better to get more information and knowledge as i mentioned before. By learning programming languages , you will be able to understand things very well when something related to it comes into your experience. You will be able to understand "How this thing is working" and "What is happening behind an application" so its better to learn programming languages so you can understand what is happening behind the application.

What Are The References/Best Resources To Get Started?

Books are the best resources to learn things. There are many books available related to Ethical Hacking and Web Application Security. Many websites are also available like OWASP. OWASP is the best resource to learn different methodology of testing a security flaw and to get information about a vulnerability. I'd suggest all of the viewers to check out OWASP. You guys can also see my site , this is my personal site where i used to upload all of my research work and tutorials related to Web Application Security.

Thanks Shawar Khan For Your Time, Till We see you next time on Techmedia NG :)

No comments

Powered by Blogger.