A Pakistani hacker has been ranked the third most accomplished bug hunter in the world by Dark Reading, a cyber security news site.

Hacker and bug hunter Shahmir Amir. — Photo courtesy: Twitter
Hacker and bug hunter Shahmir Amir. — Photo courtesy: Twitter

A Multan native, Shahmir Amir has also been dubbed the 11th most top-rated hacker in the world by HackerOne, a vulnerability disclosure company in California.

But it's not just fancy titles. Amir has raked in $150,000 by reporting bugs, or flaws in a computer program or system, to more than 300 organisations around the world including tech giants such as Facebook, Microsoft, Google, Yahoo, Twitter, LinkedIn and Dropbox, all in a span of two years.

Starting out

The 21-year-old attributes his success to his curiosity with computers and technology. In an interview with ProPakistani, he remembers his Pentium 3 computer that he used to have as a child, one that would continuously have issues. Amir's solutions usually consisted of a quick Google search and trying his own hand at the problem, a practice that would later hone his technical problem solving skills.

Amir's defining moment came in the form of a seminar conducted at his university about cyber security. It was then that he started his formal research, using online tools and resources to help him understand more about this field that had long piqued his interest. Hard work and unrelenting motivation eventually lead him down the rabbit hole and into the world of white hat hacking.

Is white hacking ethical?

Yes, it most certainly is. According to Amir, his role is to identify security risks in emerging products and services, whereupon he informs the manufacturers so that the issue can be resolved. As an information vulnerability researcher, companies acknowledge his work and even pay him generous bounties for doing so.

Amir is currently based in Lahore, managing his own cyber security startup, Cyphlon, with his own team of six individuals, lead by Plan9 of the Punjab Information Technology Board. He has also been invited to Las Vegas, Nevada to attend DefCON, one of the world's largest hacker conventions, by HackerOne.

Amir's advice to hacking newbies? Work to learn, not to earn. He suggests one must excel in this field before they focus their energies on earning.

In his words: "Work hard, learn before earning and donate generously, it will help you achieve countless blessings".

Opinion

Editorial

Unsustainable growth
Updated 23 Jun, 2026

Unsustainable growth

CLICHÉS are an essential part of political rhetoric. But when repeated often, they lose their impact. So when...
Banned speeches
23 Jun, 2026

Banned speeches

NATIONAL Assembly Speaker Ayaz Sadiq on Sunday formally lifted long-standing restrictions on the airing of ...
New GB government
23 Jun, 2026

New GB government

WITH the newly elected lawmakers of the Gilgit-Baltistan Assembly taking oath on Monday, the PPP looks set to head...
A costly cut
Updated 22 Jun, 2026

A costly cut

Climate risks are increasing and public investment should reflect that reality.
Guarded access
22 Jun, 2026

Guarded access

ONE of the government’s ‘novel’ proposals to snag tax evaders has collided with some harsh realities. On...
Lyari’s passion
22 Jun, 2026

Lyari’s passion

THE love for football in Lyari knows no bounds. The World Cup might be underway thousands of miles away in North...