THINK LIKE
AN ATTACKER.
Ahmed K Alshammari / J4N4Z4
Offensive Security & VAPT Manager. Network Engineer, Ethical Hacker, penetration tester, security researcher and builder of enterprise offensive-security programs — from initial deployment to full operational ownership.
OFFENSE IS A MINDSET.
As a Network Engineer and Ethical Hacker with a degree in Network Engineering, I lead and execute internal and external penetration testing, vulnerability management, adversary simulation and offensive security operations. My experience spans hands-on exploitation, wireless assessments, social engineering, physical security testing, and the deployment and end-to-end management of enterprise security testing platforms.
j4n4z4@kali:~$ whoami Ahmed K Alshammari | Network Engineer | Ethical Hacker | Offensive Security & VAPT Manager j4n4z4@kali:~$ cat /etc/specialties web-application-testing internal-external-pentesting active-directory wireless-security red-team-operations social-engineering physical-assessments vulnerability-management j4n4z4@kali:~$ echo $MISSION Find the attack path. Prove the impact. Drive remediation.
RESULTS THAT MATTER.
ACROSS PROFESSIONAL ASSESSMENTS
HACKERONE PROFILE
FOR IMPACTCORPORATE RECOGNITION
CRITICAL VULNERABILITY DISCOVERY
The selected research below is deliberately anonymized: no client names, internal systems, endpoints, credentials, or sensitive proof-of-concept details are disclosed.
ATTACK SURFACE.
Selected vulnerability classes identified during authorized security assessments. Impact is distinguished from hypothetical risk.
Remote Code Execution (RCE)
Chained insecure service exposure, arbitrary file read and exposed cryptographic secrets to demonstrate remote command execution.
ATTACK CHAINSQL Injection
Authentication bypass through injectable login input, enabling privileged access to confidential business dashboards.
SQLiIDOR / BOLA
Broken object-level authorization exposed other users' records through insufficient ownership checks.
API SECURITYUnauthenticated Data Exposure
Improper access controls exposed sensitive employee or supplier records without valid authentication.
DATA EXPOSUREAuthentication Bypass & OTP Brute Force
Client-side trust weaknesses and missing OTP attempt limits created an account takeover risk; takeover was not claimed as verified.
AUTHENTICATIONCredential Attacks & Unrestricted File Upload
Exposed credentials enabled account access and weak file validation permitted executable upload; execution was not verified.
FILE UPLOADInsecure Cloud Database Rules
Overly permissive cloud database rules allowed broadly scoped access to sensitive records through unverified registration.
CLOUDSecret & Configuration Disclosure
Exposure of sensitive application configuration and signing material, enabling deeper exploitation chains.
SECRETSBusiness Logic & Authorization
Testing workflows, identity boundaries and access decisions for weaknesses beyond scanner-only coverage.
MANUAL TESTINGBEYOND THE SCANNER.
Penetration Testing
Hands-on internal and external network, web application, API, Active Directory and wireless security assessments.
Social Engineering
Executed authorized voice-based impersonation and telephone social-engineering assessments to evaluate human security controls.
Physical Security
Performed authorized physical intrusion assessments and demonstrated weaknesses in entry control procedures.
Adversary Simulation
Red Team and Purple Team exercises, attack-path validation and security-control effectiveness testing.
Enterprise Security Programs
Built and managed testing solutions across their full lifecycle: requirements, implementation, integration, go-live, operations and reporting.
Security Platforms
Experience with Rapid7, Nessus, Checkmarx, Appknox, Horizon3.ai, CyCognito, Invicti and other offensive-security technologies.
PROVEN FOUNDATIONS.
OSWP
OFFSEC WIRELESS PROFESSIONAL · EARNEDeCPPT
PENETRATION TESTING · EARNEDCCNA
NETWORKING · EARNEDeJPT
INE SECURITY · CERTIFIEDPT1
TRYHACKME · CERTIFIEDOSCP
IN PROGRESS · NOT YET CERTIFIEDCredential icons are custom security-themed illustrations, not official issuer logos.
LET'S TALK SECURITY.
Open to professional conversations about offensive security, security research, penetration testing and cybersecurity leadership.