Secure Code Review & Vulnerability Assessment
Manual PHP source code review identifying 7 critical and high vulnerabilities including OS Command Injection, SQL Injection, Local File Inclusion (LFI), and Insecure File Upload.
> Hello, I'm
I break systems to make them stronger. Specialized in uncovering vulnerabilities before the bad guys do.
┌──(root㉿kali)-[~]
└─# whoami --info
.----. USER : Youssef Alaraky
/ \ ROLE : Junior Pentester & AppSec
| () () | EDU : B.Sc. Cybersecurity (Alex Univ)
\ == / TRAINING : eJPTv2 | CCNA | MCSA | PT&AppSec
`----'
[+] Status : 🟢 Systems Audited & Hardened
[+] Mission : Break systems to make them stronger
└─# █
B.Sc. student in Cybersecurity at Alexandria University (CGPA: 3.646).
Specialized in vulnerability assessment, web application security, system hardening, and cryptography.
My goal is to secure enterprise networks and uncover critical flaws before attackers do.
CyberSecurity Department Manager at BYS Volunteer Initiative and experienced in hands-on penetration testing methodologies, network administration (CCNA/MCSA), and developing custom security tools.
Practical techniques for identifying, assessing, and mitigating cybersecurity risks across modern IT environments and web assets.
Hands-on application security testing to detect flaws, logic vulnerabilities, and enforce secure coding practices.
Hardening WordPress systems, securing plugins and configurations against common web attack vectors and exploits.
Reviewing cloud security configurations, compliance guidelines, and infrastructure security fundamentals.
Monitoring security logs, detecting suspicious activities, and identifying potential security incidents across networks.
Developing actionable security awareness campaigns and strategies to promote a security-conscious culture within organizations.
Manual PHP source code review identifying 7 critical and high vulnerabilities including OS Command Injection, SQL Injection, Local File Inclusion (LFI), and Insecure File Upload.
Complete TryHackMe lab writeup detailing SMB scanning, Metasploit MS17-010 exploitation, Meterpreter shell migration, hash dumping, and JTR password cracking.
Full web application security assessment report identifying 12 vulnerabilities including DOM XSS, SQLi Auth Bypass, IDOR, Price Manipulation, and File Upload bypasses.
Junior Penetration Tester (Hands-on Training - Completed)
eLearnSecurity Jul 2026 – Aug 2026Cisco Certified Network Associate (Training Completed)
Cisco Networking Fundamentals Dec 2024 – Apr 2025Penetration Testing & Application Security Track
National Telecommunication Institute (NTI) Jul 2026 – Aug 2026Windows Server Administration (Training Completed)
Microsoft Systems Administration Jul 2025 – Sept 2025Ready to secure your systems? Let's talk.