Irfan AliLashari
Cybersecurity student at QUEST with hands-on experience in penetration testing, CTF competitions, and ethical hacking. Active on HackTheBox with 25+ machines rooted.
Building security, one exploit at a time.
I'm a second-year cybersecurity student at Quaid-e-Awam University of Engineering, Sciences & Technology (QUEST), Nawabshah, focused on penetration testing and offensive security. I've completed HackTheBox Pro Labs covering Active Directory attacks, C2 operations, lateral movement, DevOps infrastructure exploitation, and privilege escalation.
My passion lies at the intersection of offensive security and real-world defense. I actively compete in CTF challenges on HackTheBox, where I've rooted 25+ machines ranging from medium to insane difficulty, including complex Windows Active Directory environments with techniques like RBCD abuse, ADCS exploitation, and cross-domain attacks.
Beyond HTB, I lead the cybersecurity community at Youth Empowerment where I run sessions and organize events, and I collaborate on AI research through the IEEE IES Generative AI Challenge 2026. I'm actively looking for security internships where I can contribute to real vulnerability assessments and penetration testing engagements.
Academic Background
BS Cyber Security
Pursuing comprehensive studies in cybersecurity including network security, ethical hacking, digital forensics, and secure software development.
Higher Secondary Certificate (HSC) & Secondary School Certificate (SSC)
Completed secondary and higher secondary education with distinction, building a strong foundation in mathematics, science, and computer studies.
Technical Arsenal
Offensive Security
Network & Infrastructure
Tools & Development
Tools & Technologies
What I've Built
Projects that combine security principles with clean engineering. Interested in collaborating? Get in touch.
EcoSphere — IEEE IES GenAI Challenge 2026
AI Research · Team Lead
Team lead for a project shortlisted out of 575 global submissions from 57 countries. Built a three-layer generative AI pipeline combining weather synthesis (Conditional DDPM), CFD surrogate modeling (Pix2Pix GAN), and multi-agent HVAC control (QMIX MARL). Reported 40.6% energy savings and 42,000× CFD speedup in simulation results.
Dept. of Cyber Security Website
Web Development · Security
Built a responsive and secure department website for QUEST's Cybersecurity department, presented at University Exhibition. Applied security best practices including CSP headers, input sanitization, and performance optimization with interactive UI elements.
Personal Portfolio Website
Web Development · UI/UX
Developed a modern, fully responsive portfolio with dark/light mode support and cross-browser compatibility. Showcased cybersecurity projects while following secure coding standards and modern design principles.
Stock Exchange Management System
Database Design · Backend
Designed a relational database system for stock trading operations using SQL. Implemented features for stock listings, real-time transactions, and portfolio management while ensuring data integrity, security constraints, and full ACID compliance.
Credentials & Achievements
HackTheBox Pro Labs, Google, Cisco certifications, and hands-on offensive security achievements.
Full AD exploitation chain including MSSQL enumeration, ADCS abuse, lateral movement, C2 operations, and privilege escalation across a multi-machine network.
DevOps infrastructure exploitation covering CI/CD pipelines, container security, AD enumeration, lateral movement with C2 frameworks, and privilege escalation.
Comprehensive introduction to cybersecurity concepts, the importance of security, and career pathways.
Security frameworks, controls, and risk management strategies for enterprise environments.
Deep dive into TCP/IP, network protocols, firewalls, and network-based attack vectors.
Practical Linux command-line skills and SQL fundamentals for security investigations.
Foundational networking concepts including OSI model, routing, and network infrastructure.
Foundational understanding of cybersecurity principles, common threats, and mitigation techniques.
25+ machines completed across Easy to Insane difficulty including AD environments, ADCS abuse, RBCD, and multi-domain attacks.
Let's work together
I'm actively seeking internship opportunities in cybersecurity. Whether you're looking for a pentesting intern, security researcher, or just want to talk security — I'm open to it all.
Internship Inquiry
Looking for a motivated cybersecurity intern with real-world pentesting experience? I'm available for internships in Karachi and remote roles.
Send Email