I find vulnerabilities before attackers do. Specializing in web & API security testing, OWASP Top 10, and building the Arabic cybersecurity community through الفكر السيبراني.
Tools & Stack
// About
Security researcher specializing in web & API penetration testing since 2023. I document everything — methodologies, tools, OWASP findings — and share it with the Arabic cybersecurity community.
Creator of OWASP Top 10 references (Web & API), PortSwigger lab solutions, and pentest automation scripts. All available on GitHub.
See my work →// Projects
Complete OWASP Top 10 2025 reference with deep vulnerability analysis and PortSwigger lab solutions.
Complete OWASP API Top 10 2023 reference with API security testing methodology.
Professional pentest workflow — Recon, Enumeration, Exploitation, Reporting.
Custom scripts, payloads, wordlists, and automation tools for web pentesting.
Complete solutions for all PortSwigger Web Security Academy labs.
Personal website — portfolio, OWASP KB, methodology, and writeups.
Need a security assessment?
Available for remote freelance web & API security engagements.
// Knowledge Base
// Methodology
Reconnaissance
Passive & Active Information Gathering
The foundation of every engagement.
Mapping & Enumeration
Deep Surface Analysis
Discover all entry points, services, and parameters.
Vulnerability Analysis
Identify Weaknesses
Analyze all entry points for vulnerabilities.
Exploitation
Controlled Proof of Concept
Exploit confirmed vulnerabilities within scope.
Post-Exploitation
Impact Assessment
Assess real-world impact.
Reporting
Clear, Actionable Documentation
Write for both technical teams and management.
// Writeups
// Contact
Message sent.
I'll get back to you within 24 hours.
Find me on
Availability