"Think outside the box."
About Me
Welcome to my personal profile! I am Shaheen, a Sudanese specialist in the field of web vulnerability hunting, in addition to my activities in ethical hacking and cybersecurity. I began working in this field several years ago, driven by curiosity and a desire to improve and secure websites and how they can achieve the highest levels of security, through an in-depth understanding of the methods and areas of piracy and their relationship to the structure of websites. All this is in addition to building websites with innovative designs and high security. “Special thanks to my father who was always with me step by step.”
Skills
Over the years, I’ve developed a strong set of skills that allow me to identify and exploit a wide range of vulnerabilities. Below are some of my favorite areas of expertise:
- IDOR (Insecure Direct Object References): Exploiting improper access controls to access data not intended for the user.
- JWT Bypass: Understanding token mechanisms to bypass authentication and authorization.
- SSRF (Server-Side Request Forgery): Manipulating server requests to access internal systems or sensitive data.
- XSS (Cross-Site Scripting): Injecting scripts into web pages to manipulate user actions or steal data.
- OS Command Injection: Leveraging poorly sanitized inputs to execute commands on the server.
- SSTI (Server-Side Template Injection): Exploiting vulnerabilities in template rendering engines.
Achievements
My most significant achievement to date has been completing the PortSwigger Academy Labs, which I consider the gold standard for web penetration testing education. This experience allowed me to refine my skills in identifying and exploiting vulnerabilities, making me a more effective bug bounty hunter.
Contact
I’m always excited to connect with like-minded individuals. Let’s collaborate and work together to make the internet a safer place for everyone!