Khabbab
Sarker
Roles: Security Researcher; OSINT & Digital Forensics; Jr. Penetration Tester; Web & AI Security; Bug Hunter.
I explore, build, and analyze web systems. I am interested in web security, penetration testing, OSINT, and digital forensics. I also have some experience with AI security. I enjoy finding security problems, learning how they work, and finding ways to make systems safer. I always try to learn new things and improve my knowledge of cybersecurity and technology.
Security Researcher ¦ Jr. Penetration Tester ¦ Digital Forensic ¦ AI Security
TECHNICAL SKILLS
Website Security
Assessing web applications for security vulnerabilities by following OWASP Top 10 guidelines and industry-standard testing methodologies. Identifying and analyzing common vulnerabilities, including XSS, SQL Injection (SQLi), CSRF, IDOR and Authentication Bypass.
- OWASP Top 10 Vulnerability Assessment
- Web Application Penetration Testing
- Burp Suite & HTTP Traffic Analysis
- API Security Auditing
OSINT
Gathering, analyzing, and correlating publicly available information to identify digital footprints, assess exposure, and support intelligence investigations. Conducting reconnaissance using publicly accessible sources, including social media, websites, domain records, IP addresses, metadata and online databases.
- Digital Footprint & Social Media
- WHOIS & DNS Reconnaissance
- Geolocation & Image Intelligence
- Public Data Exposure Assessment
Digital Forensic
Identifying, preserving, examining, and analyzing digital evidence to investigate security incidents, cybercrimes and suspicious digital activities while maintaining evidence integrity. Conducting forensic investigations across computers, storage devices, mobile devices and digital files using established forensic methodologies and evidence-handling procedures.
- Disk & File System Forensics
- File Recovery & Metadata Analysis
- Memory & Network Forensics
- Log Analysis & Timeline
Project Management
Planning, organizing and managing projects from initiation to completion using industry-standard project management methodologies and best practices. Applying traditional project management (Waterfall) and Agile approaches to define project goals, manage project scope, coordinate teams, allocate resources, and deliver projects within established timelines and budgets.
- Project Documentation & Reporting
- Risk Assessment & Mitigation
- Project Execution & Quality Management
- Budget & Resource Management
Artificial Intelligence
Using Artificial Intelligence (AI) and Generative AI to improve productivity, simplify workflows, and solve real-world problems. Applying AI tools for research, content creation, data analysis, communication, and application development through effective prompting and responsible AI practices.
- Prompt Engineering & Prompt Patterns
- AI-Assisted Research & Information Analysis
- AI-Powered Brainstorming & Project Planning
- Vibe Coding & AI-Assisted App Development
Programming
Learning programming and software development, focusing on building foundational coding skills and understanding how applications and websites work. Exploring programming languages, web technologies, and AI-assisted coding while practicing problem-solving and building small projects to improve my skills.
- Programming Fundamentals
- HTML, CSS, JavaScript & Python
- Frontend Web Development
- AI-Assisted Coding
Experience
Security Researcher @ HackerOne / Bugcrowd
March 2026 – Present- Asset Reconciliation
- Vulnerability Assessment and Penetration Testing (VAPT)
- Bug Bounty
Chief Technology Officer @ SAWDIKUL KITAAB
October 2022 – Present- Technology Leadership
- Social Media Management
- Consulting
- Technology Management
Certifications
Google Project Management Professional Certificate
Coursera
Link coming soonJr Penetration Tester Learning Path
TryHackMe
Link coming soonCertified OSINT & Reconnaissance Investigator
Hack & Fix Academy
Initiate
Handshake
For security consulting, digital forensics, or OSINT research inquiries, submit your request through the form below. Each submission will be reviewed, and a response will follow accordingly.