Penetration Testing · Red Teaming · Vulnerability Research · Enterprise Security

I am an Offensive Security Specialist focused on practical penetration testing, red teaming, vulnerability research and enterprise security.

My work spans web application security, Windows and Active Directory environments, infrastructure security and adversary simulation, with a focus on identifying high impact weaknesses and translating technical findings into meaningful security improvements.

I also contribute to responsible vulnerability disclosure, security research and community knowledge sharing, while exploring the growing role of AI in offensive security.

Practical cybersecurity, penetration testing, red teaming and vulnerability research notes.

A growing knowledge base covering offensive security techniques, tools, methodologies and technical references.

Website:
https://notes.asifnawazminhas.com/

Repository:
https://github.com/asifnawazminhas/security-notes

A practical collection of offensive security commands and one liners.

A searchable reference covering penetration testing, Active Directory, web security, reconnaissance, red teaming, Windows, Linux and other offensive security workflows.

Website:
https://oneliners.asifnawazminhas.com/

Repository:
https://github.com/asifnawazminhas/awesome-offensive-oneliners

36 tools · 13 security native · 6 categories

A focused directory of AI security tools and general purpose AI that can support authorised security research, penetration testing, autonomous penetration testing, red teaming, AppSec, LLM security, MCP security, vulnerability research, analysis and reporting.

Website:
https://ai.asifnawazminhas.com/

An interactive cybersecurity project focused on learning, experimentation and practical security knowledge.

Website:
https://studio.asifnawazminhas.com/

A red team focused project from my offensive security research and tooling work.

Repository:
https://github.com/asifnawazminhas/wwwtree-redteam

A dedicated overview of my experience, certifications, research, vulnerability research and offensive security work.

Website:
https://about.asifnawazminhas.com/

My main areas of focus and research include:

• Penetration testing
• Red teaming and adversary simulation
• Web application security
• Windows security
• Active Directory security
• Infrastructure security
• Vulnerability research
• Responsible disclosure
• AV and EDR evasion research
• Post exploitation and pivoting
• Purple teaming
• AI assisted security testing
• LLM security
• MCP security
• Automated reconnaissance
• Security tooling and automation

I actively contribute to responsible vulnerability disclosure and vulnerability research.

My research includes hundreds of reported security issues and multiple published CVEs across different products and platforms.

An overview of vulnerabilities I have reported and published through Wordfence Threat Intelligence, including CVE identifiers, vulnerability descriptions and affected software:

Wordfence Researcher Profile:
https://www.wordfence.com/threat-intel/vulnerabilities/researchers/asif-nawaz-minhas?page=2

OSEP	OSCP	OSWP	CRTO	CISSP	OSWA	CISM

My academic research focuses on purple teaming, cybersecurity exercises, collaboration and knowledge transfer between offensive and defensive security teams.

The research explores how organisations can structure, implement and sustain effective purple teaming programmes and how collaborative security exercises can improve knowledge transfer and cyber resilience.

Contributor to the community driven OWASP GenAI Red Teaming Guide, covering approaches, risks and methodologies for red teaming generative AI systems.

https://genai.owasp.org/resource/genai-red-teaming-guide/

I regularly conduct responsible vulnerability research and report identified security issues through coordinated and responsible disclosure processes.

My research interests include:

• Web applications
• Authentication and authorisation
• Enterprise environments
• Infrastructure
• Active Directory
• Security misconfigurations
• AI enabled applications
• LLM security
• Emerging attack surfaces

MSc Information Security
Royal Holloway, University of London

Bachelor ICT: Information & Communication Technology
Windesheim University of Applied Sciences

• Security Notes
• Offensive One Liners
• wwwtree-redteam

Building and maintaining practical offensive security resources, tooling and research.