Nehad Shakoor

AI machine learning cybersecurity
KARACHI · PK · '26
About me

Hi, I'm Nehad. I'm into cybersecurity, AI, and the place where they meet — AI security. I like pulling systems apart to see how they break, poking at language models, and building small tools and experiments along the way. Most of what I do ends up here: projects I've worked on and things I've written down.

Interests

  • LLM & AI security
  • Cybersecurity
  • Penetration testing
  • Red teaming
  • Cloud security
  • Machine learning

Toolbox

  • Python · C++ · Golang
  • SQL · Bash · Linux
  • PyTorch · TensorFlow
  • Django · Flask · Next.js
  • AWS · Azure · Docker
  • Nmap · Wireshark · Burp Suite

Contacts

Table of Content
llm !
1. the Scanner
red-team for LLM agents
AISec '26
2. the Paper
quantization × injection
RAG
3. MediReach
offline RAG · WHO corpus
4. the Day job
CyberGaar · Habib Metro
PISF '26
5. the Writing
Shadow AI · a Smaller Lake
6. the Notes
write-ups & findings
what I'm
working on
right now
selected Work & studies
FYP · booth · 2026
01.MediReach

An offline medical assistant that answers from a WHO corpus with no internet connection, running a quantized Llama 3.2 3B through llama.cpp. Smarter chunking lifted retrieval precision from 15% to 85%. Final-year project, two semesters, written up as an IEEE paper.

02
INT4 → FP16 · 12 conditions
02.Quantization × Injection

A model that resists prompt injection at full precision doesn't always hold up once it's quantized to int4. This measures the difference — twelve conditions, the same attacks, run across different precision levels.

03
pwnzz
03.PwnzzAI

A deliberately vulnerable Flask app for working through the OWASP LLM Top 10 one case at a time. Comes with a jailbreak-prompt classifier (logistic regression, 88% accuracy) as a baseline to test detection against.

04
agent search shell secrets ! tool-poisoning · indirect injection · exfil
04.AgentProbe

A security scanner for LLM agents — the kind that can call tools and run commands. It checks for tool-poisoning, prompt injection through retrieved content, and data leaking out through tool calls. Point it at a running agent and it reports what it could get through.

05
talk → article
05.video2article

A tool that turns long technical talks into clean, readable articles — I built it to get IBM Technology videos into a format I could actually reread. Built with the Claude API, FastAPI, Next.js, and Docker.

06
آزمائش perturb swap UrduBench · 2k adversarial prompts
06.UrduBench

A benchmark for testing how language models hold up against attacks in Urdu — a language 230 million people use that most safety research skips. Native-speaker-checked prompts paired with English translations, scored on how consistently models resist and refuse across both.

Written & published
کلامِ اقبال
a line from Jawab-e-Shikwa

نغمۂ موج ہے،

ہنگامۂ طوفاں ہو جا

you are the song of the wave —

become the storm.

علامہ اقبال · جوابِ شکوہ ⬦ Allama Iqbal ⬦ Jawab-e-Shikwa
Nehad Shakoor · 2026
events Events & community
'26
01
organising

Web3 Disrupt

IBA Karachi Campus · Pakistan

Helped organize the first Web3 event in Pakistan — around 600 attendees.

'26
02
volunteer lead

CyberSafe Pakistan 2026

NIC Karachi

Volunteer team lead — coordinated volunteers and kept the event running on schedule.

'25
03
hackathon

Atomcamp National AI Hackathon

Pakistan

Placed top 5 out of 25 teams with a working prototype.

Say something.

If something here interests you — a project, an idea, a role, or a book worth reading — send me a note. I'm happy to talk, and I reply to most messages.

✉  nehadshakoor13@gmail.com
yours, Nehad