Nasir Khan

Pakistan

Join Prog.AI to see contacts

Summary

🤩

Rockstar

Nasir Khan is a security-focused software engineer with 10 years of experience and a current role on the Synack Red Team, specializing in offensive security and exploit development. He contributes robust backend code to notable open-source security and tooling projects—most prominently ghauri, an advanced cross-platform SQL injection automation tool where he improved payload generation, error-based extraction, stacked query support, and resilience to connection errors. Comfortable across Python ecosystems, he also maintained and enhanced course-downloader utilities (udemy-dl, acloud-dl) adding caption/asset support and cross-version compatibility. Based in Pakistan and holding a Computer Science degree from Hamdard University, Nasir blends hands-on tool development with pragmatic security research, demonstrating a penchant for turning complex attack techniques into reliable, reusable tooling.

10 years of coding experience

Stackoverflow

Stats

11reputation

538reached

1answer

0questions

Github Skills (14)

sql-injection10

security-testing10

error-handling10

download-manager10

sql10

python10

http-request9

webscraping9

back-end-development9

api8

file-handling8

test-automation8

apidoc8

git6

Programming languages (3)

CGoPython

Github contributions (5)

r0oth3x49/acloud-dl

Jul 2018 - Jul 2022

A cross-platform python based utility to download courses from acloud.guru for personal offline use.

Role in this project:

Back-end Developer

Contributions:1 release, 35 commits, 18 PRs in 4 years

Contributions summary:Nasir primarily focused on improving the functionality and quality of a Python-based course downloader. They added support for downloading course assets and subtitles. Several commits involved fixing bugs and improving code quality. The user also addressed issues related to authorization and course information extraction.

pythonacloudguruacloud-dllinuxwindows

r0oth3x49/ghauri

Oct 2022 - Jan 2023

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Role in this project:

Back-end Developer & Security Engineer

Contributions:43 releases, 63 commits, 16 PRs in 3 months

Contributions summary:Nasir primarily contributed to the development of the `ghauri` tool, focusing on SQL injection detection and exploitation. Their work involved modifying core files related to payload generation (`payloads.py`), error-based extraction (`extract.py`), and testing methodologies (`tests.py`). They also implemented support for stacked queries and added features to handle connection errors. Additionally, the user made updates related to user interface, code quality, and other minor bug fixes and enhancements.

securitysql-injection

Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.

Request Free Trial