Hazem B.

- Pentests of websites and mobile applications

- Vulnerability assessment and recommendations

- Network, cloud, mobile, social engineering pentesting, etc.

- Writing audit reports

- Presenting audits during restitution meetings

- Pentest: web application audits (OWASP), AD/infra tests, exploit writing (XSS, IDOR, SSRF, RCE), Burp plugins and automation scripts (Python/Bash), source code and configuration audit.

Pentests of Websites, AI, and mobile applications.

Mission management: planning from A to Z (kick-off, scope definition, milestones, SLAs), leading meetings, preparing materials, monitoring until final restitution.

- Fuzzing & Reverse: design of targeted fuzzers (image/stream analyzers), crash analysis (ASAN/UBSAN), DLL/binary reverse engineering (Ghidra, WinDbg) and development of non-destructive PoCs.

- Achievements: - Compromise of an Active Directory with ~50k users (controlled environment); mapping, privesc, and pivot. - Bypass of business rules / filtering (WAF/ACL) demonstrating business impact.

- Vulnerability assessment and recommendations.

- Network, cloud, mobile, social engineering pentesting, etc.

- Define security rules

- SOC analyst

- Penetration testing - Pentester

- Fix and patch vulnerabilities

- Define security policy

- Incident management

- Collaborating with Knowsec, a penetration testing and vulnerability assessment company and a leading secure development company, as an independent penetration tester.

- Performing comprehensive penetration tests on websites and mobile applications developed by Knowsec for clients, ensuring the implementation of robust security measures.

- Working closely with a highly skilled and globally recognized penetration testing team at Knowsec to identify vulnerabilities and mitigate potential threats.

- Specializing in various penetration testing techniques, including network infrastructure testing, agile penetration testing, cloud penetration testing, wireless penetration testing, social engineering, and mobile penetration testing.

- Contributing to enhancing the overall security of clients' digital assets by providing detailed vulnerability assessment or penetration testing reports and recommending effective solutions.

- Played a crucial role in strengthening clients' cybersecurity defenses by discovering vulnerabilities before they could be exploited by malicious actors.

- Providing valuable insights and recommendations to clients through cybersecurity guidance services offered in collaboration with Knowsec, helping them navigate the complex cybersecurity landscape.

- Professionalism, expertise, and commitment to excellence in every project, aligning with Knowsec's mission to deliver secure and customized digital solutions to clients worldwide.