A Pakistani hacker has been ranked the third most accomplished bug hunter in the world by Dark Reading, a cyber security news site.

Hacker and bug hunter Shahmir Amir. — Photo courtesy: Twitter
Hacker and bug hunter Shahmir Amir. — Photo courtesy: Twitter

A Multan native, Shahmir Amir has also been dubbed the 11th most top-rated hacker in the world by HackerOne, a vulnerability disclosure company in California.

But it's not just fancy titles. Amir has raked in $150,000 by reporting bugs, or flaws in a computer program or system, to more than 300 organisations around the world including tech giants such as Facebook, Microsoft, Google, Yahoo, Twitter, LinkedIn and Dropbox, all in a span of two years.

Starting out

The 21-year-old attributes his success to his curiosity with computers and technology. In an interview with ProPakistani, he remembers his Pentium 3 computer that he used to have as a child, one that would continuously have issues. Amir's solutions usually consisted of a quick Google search and trying his own hand at the problem, a practice that would later hone his technical problem solving skills.

Amir's defining moment came in the form of a seminar conducted at his university about cyber security. It was then that he started his formal research, using online tools and resources to help him understand more about this field that had long piqued his interest. Hard work and unrelenting motivation eventually lead him down the rabbit hole and into the world of white hat hacking.

Is white hacking ethical?

Yes, it most certainly is. According to Amir, his role is to identify security risks in emerging products and services, whereupon he informs the manufacturers so that the issue can be resolved. As an information vulnerability researcher, companies acknowledge his work and even pay him generous bounties for doing so.

Amir is currently based in Lahore, managing his own cyber security startup, Cyphlon, with his own team of six individuals, lead by Plan9 of the Punjab Information Technology Board. He has also been invited to Las Vegas, Nevada to attend DefCON, one of the world's largest hacker conventions, by HackerOne.

Amir's advice to hacking newbies? Work to learn, not to earn. He suggests one must excel in this field before they focus their energies on earning.

In his words: "Work hard, learn before earning and donate generously, it will help you achieve countless blessings".

Opinion

Editorial

A difficult story
Updated 12 Jun, 2026

A difficult story

Unless productivity becomes the dominant target of economic policy, Pakistan will continue to oscillate between crises and fragile recovery.
Rough waters
12 Jun, 2026

Rough waters

AMONGST the key potential triggers for fresh conflict in South Asia is water. The Indian state is behaving in an...
Politicised football
12 Jun, 2026

Politicised football

ALMOST three-and-half years since Lionel Messi led Argentina to FIFA World Cup glory, the latest edition of...
GB polls’ aftermath
Updated 11 Jun, 2026

GB polls’ aftermath

The new administration must address the region’s issues proactively.
Peace in retreat
11 Jun, 2026

Peace in retreat

THE ceasefire announced in April was supposed to create space for negotiations. Instead, it has been repeatedly...
A few good men
11 Jun, 2026

A few good men

IT was a brave move, no doubt. This Tuesday, in the land of the Afghan Taliban, a few good men decided to take a...