Interview With Osama Mahmood - Security Researcher From Pakistan

Hello Readers, For the Past few months we have Interviewed so many Security Researchers all around the World from different Countries like India, Pakistan, Germany, Columbia and so on. Here is another Interview With Osama Mahmood - Security Researcher From Pakistan who is also a active Bug Hunter in BugCrowd and HackerOne. He's here to share some of his story with us about his career in this field.

Osama Mahmood

Hello, Osama Mahmood Introduce YourSelf To Our Readers

I am Osama Mahmood and i am a web application security researcher and also a student in High School (FSC), I am 17 years ajd i am highly passionate about Computers and cyber security. I am a starter level programmer and an ethical hacker, i spent most of my time on my laptop learning and developing new skills and techniques online related to cyber security and exploitation. I have also coded some tools ( and the creativity present in this field really inspires me. and i have been acknowledged by Top well known companies like Facebook, Microsoft, Yahoo, Sony, Nokia and many more company.

How You Started The Journey As A Security Researcher?

In the starting i was on the dark site of the hacking and was really enjoying it but as the time passed it was getting boring and i wanted to learn more and learn new thing so a friend of mine motivated me to leave Black Hat Hacking and Start White Hat Hacking and help other and after that i learnt
a lot of new hacking and penetration testing techniques.

When Did You Start Hacking And Tell Us About Your Experience?

I was not much into computers until late 2009 that is when i got my first computer and at that time i didn't even knew how to install windows then we shifted to Karachi and a friend in my class told me about hacking and then i started getting serious about it and started learning about it
but my friend left after some time.And since that time i have learned a lot and improved my skills. As at that time i didn't knew how to start and what to do so i started to learn how to hack Facebook as everyone want that but got no success as by watching video on Youtube they used tools which don't do anything just wast your time after that i came into web penetration testing field.

How Did You Start Learning Hacking And Who Taught You?

In the start all was self learned and after that some of my friend sent me some e-books related to Sql Injection and other i downloaded from internet and started learning it. But to be true Google is my teacher i thing is a person have access to internet then he don't ask others for help there is a ocean of knowledge to learn from if you really are in to learning.

Which Website/System Did You First Break Into?, What's The Vulnerability?

In the starting i hacked a lot of systems as i had shared internet connection i often hacked my friends computer which was present on the same network for fun and pranks i also secured website of my friends and the most common vulnerability which was used in the web application was SQL Injection and in the Windows XP was the NetApi Bug.

What Advise Will You Give To Beginners Coming Into This Field?

For those who want to get into this field the one thing they must have is a lot of patience and hard work as you will get knocked down by many challenges but if you gave up you can't grow in this field and if you remained determined you can accomplish anything. And do study about web penetration testing and finding of others. And also people on my website and my aim is to make all the knowledge to be free, so anyone can learn from there.

Is Programming Language Really Important, Why? And Which Language To Learn?

Programming is not really required to be an ethical hacker but it is always better to have a basic understanding of the programming as if you don't have any professional knowledge of programming as it will teach you logic building and better understand how things actually work behind the application so it is a plus point to be a better security researcher.

What Methodology Do You Use When Participating In A Bug Bounty?

When ever i am into testing a website i look for the logical bug as they are one my Top priority list and after that i start moving towards the
other bugs like CSRF, XSS, IDOR and other.

How Do You Keep Your Skills Fresh?

I have setup some labs on my localhost and practice on them and also watch and read POCs of others and read ebooks.

What Are The References/Best Resources To Get Started?

Read, Study Quite and Never Stop Learning. The Humility Is the real key to the successful process in obtaining of knowledge and OWASP is a good resource.


How People Can Reach You?

Facebook Page:

Thanks Osama Mahmood For Your Time, See You Next Time May Be In Techmedia NG.

No comments

Powered by Blogger.