Skip to content
View smrayyans's full-sized avatar
3 followers · 2 following

Highlights

  • Pro

Block or report smrayyans

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
smrayyans/README.md

Syed Muhammad Rayyan

typing

coding gif

Cybersecurity enthusiast learning and building in public through TryHackMe, CTFs, and hands-on labs. I enjoy turning complex security ideas into practical, easy-to-understand solutions.

whoami

name: Syed Muhammad Rayyan
role: Cybersecurity Enthusiast + Aspiring Pentester
current_path: TryHackMe | CTFs | Security Research
background: Graphics design hobby -> switched to cybersecurity
mission: Build secure, practical, user-friendly solutions
Experience

  • Cyber Security Student (Part-time) at TryHackMe Aug 2025 - Present | Remote Penetration Testing, Cybersecurity Tools, Linux, Web App Security, Threat Detection, Security Research, Red Teaming, Network Vulnerabilities

  • Creative Foundation (Graphics Design Hobby) Earlier experience in visual/design work, now used to improve clarity and UX in technical/security projects.

Education

  • University of Karachi (UBIT) BS Computer Science (Feb 2024 - Apr 2028)

  • Govt. College for Men, Nazimabad HSC / Intermediate, Pre-Engineering (Nov 2021 - Jun 2023) | Grade: A

Certifications

  • TryHackMe - Cyber Security 101 (Issued Feb 2026, Expires Feb 2029) ID: THM-F9OYATOIDH | Credential

  • TryHackMe - Pre Security (Issued Jan 2026) ID: THM-SJO5ABVHBB | Credential

  • Cisco - Introduction to Cybersecurity (Issued Oct 2025) Credential

  • Cisco - Python Essentials 1 (Issued Dec 2025) Credential

  • Harvard - CS50's Introduction to Computer Science (Issued Jun 2025)

Projects

smrwiki

Personal cybersecurity cheatsheet wiki — quick-reference notes on tools, techniques, and concepts built up through TryHackMe, CTFs, and labs.

Cybersecurity Markdown

View Wiki

DVAPI Walkthrough

Hands-on exploitation of all 10 OWASP API Security Top 10 (2023) vulnerabilities on DVAPI. Manual testing with Burp Suite and Postman — BOLA, SSRF, NoSQL injection, JWT cracking, and more.

Burp Suite OWASP 10 Vulns

View Walkthrough

CTF Writeups (TryHackMe)

Detailed writeups for TryHackMe rooms covering web security, binary analysis, WordPress exploitation, and network vulnerabilities.

TryHackMe 10 Rooms

View Writeups

Hacker101 CTF Writeups

Writeups for Hacker101 CTF challenges covering web vulnerabilities, flag hunting, and real-world bug bounty style scenarios.

Hacker101 Bug Bounty

View Writeups

Security Toolkit

tools

TryHackMe

TryHackMe Badge

Stats

GitHub Stats

Contact

contribution snake

Pinned Loading

  1. FlexPay FlexPay Public

    Flexpay is a React Native mobile payments app with a Python/Flask backend that supports secure authentication, peer‑to‑peer transfers, virtual cards, QR payments, and transaction history. It’s a fu…

    TypeScript

  2. ctf-writeups-hacker101 ctf-writeups-hacker101 Public

    Writeups for cyber 101 ctfs, including methodology, tools used, and key takeaways

  3. ctf-writeups-tryhackme ctf-writeups-tryhackme Public

  4. DVAPI-walkthrough DVAPI-walkthrough Public

    Hands-on exploitation of all 10 OWASP API Security Top 10 (2023) vulnerabilities on DVAPI. Manual testing with Burp Suite and Postman — BOLA, SSRF, NoSQL injection, JWT cracking, and more.

    1

  5. IMF-1-walkthrough IMF-1-walkthrough Public