I specialize in manual penetration testing and uncovering high-impact vulnerabilities through deep analysis of application logic.My focus is not just finding bugs — but turning them into real-world impact.
Aspiring Cybersecurity Researcher dedicated to strengthening national security and technological resilience. Possess deep technical expertise in vulnerability research, error analysis, and identifying critical security flaws with full-impact potential. Driven by a passion for securing sensitive data and fortifying national infrastructure against emerging threats."
- Strength: Business Logic & Manual Testing
- 🇸🇦 Mission: Strengthening digital & national infrastructure
- Still Learning Bug hunting & malware forensics
- Writing Some Useful Tools For Myself & Communities
- Currently Learning mobile pentesting & web3
- Account Takeover (ATO) via logic flaws
- Authentication & Authorization bypass
- API Security Testing & API Key Leaks
- Business Logic Vulnerabilities
- Sensitive Data Exposure & Internal Mapping
- Vulnerability Chaining (Multi-step exploitation)
- Subfinder / Amass
- Waybackurls
- Advanced Google Dorking
- Burp Suite Professional (Manual Testing Expert)
- FFUF (Fuzzing & Discovery)
- Metasploit
- Vulnerability Scanners
- Exploitation Tools
- Kali Linux
- Linux / Termux
- Docker (Custom Labs)
- Operating Syste
- Metasploit
- Network Security Testing
- Wireshark
- Proxies & Traffic Analysis
- Recon → Attack Surface Mapping
- Analyze → Break Logic & Trust Boundaries
- Exploit → Chain Vulnerabilities
- Impact → Full Compromise
- Improper Token Binding
- Referer / State Confusion ➜ Full account compromise
- Token not bound to user/session ➜ Unauthorized access
- Redirect-based blacklist bypass
- Internal network access (127.0.0.1 / SMB)
- Client-side validation flaw ➜ Admin panel takeover
- Next.js metadata leakage ➜ Internal data disclosure
- 📁 Recon Methodology
- 📁 Payload Collections
- 📁 Bug Reports (Sanitized Writeups)
- 📁 Wayback & Archived Data Analysis
- Available for penetration testing & security research
"I don’t hunt for bugs — I hunt for impact."