KAZIM KHAN

Self-taught developer building offensive-security tooling and full-stack projects — then packaging them properly instead of leaving them as one-off scripts.

View my work GitHub ↗

01 · about

Who's building this

I'm an 18-year-old self-taught developer from Lahore, Pakistan, working at the edge of offensive security and full-stack engineering. No CS degree, no bootcamp — I learn by shipping: CTF tooling, packet-capture dashboards, OSINT utilities, log analyzers.

The difference I care about lately is finishing: milkyway, my CTF orchestrator, isn't just a repo — it's published on PyPI and packaged for APT, with real CI/CD behind it.

learning: web app pentesting · OSINT & recon · network analysis
open to: bug bounty collabs · CTF teams · junior security or full-stack roles

02 · flagship

$ pip install milkyway-ctf

The one that actually shipped — not just to GitHub, but to a package index.

milkyway

published · PyPI + APT

A modular, version-controlled CTF toolkit that unifies every security domain under a single interactive shell — one prompt that takes you from zero to flag, instead of juggling ten terminals and losing track of what you already tried.

--domains 11

--commands 60

--shell interactive

--vcs saturn

--assistant pluto (AI)

mw> 1 ← enter Mercury (web security) [mercury] mw> fuzz http://target.com/FUZZ ✓ Completed | saturn recorded run #42 mw> saturn export abc123 --output writeup.md ✓ Session exported — write-up ready

Source on GitHub ↗ Package on PyPI ↗

03 · build log

$ saturn log --user kazim-45

Everything else below — versioned, shipped, and still up on GitHub.

04 · skills

$ cat stack.yaml

languages: [Python, JavaScript, TypeScript, Bash, HTML/CSS] security: [Kali Linux, Burp Suite, Nmap, Scapy, Metasploit, Wireshark] devops: [Docker, GitHub Actions, PyPI, APT/Debian, Vercel] databases: [SQLite, PostgreSQL, MySQL, MongoDB, Redis] platforms: [HackTheBox, TryHackMe, PicoCTF, PortSwigger Academy]

05 · connect

Open to work.

Bug bounty collabs, CTF teams, junior security or dev roles — reach out, I reply fast.

gh github ↗ in linkedin ↗ x x/twitter ↗ ig instagram ↗ @ email ↗