AHMED ANWAR ELSHNAWY
Summary
- Cybersecurity professional with a strong foundation in ethical hacking, penetration testing, vulnerability analysis, and network security. with 3 years of experience in Bug bounty, web and API hacking. Currently Pursuing the Offensive Security Certified Professional (OSCP) certification, I am dedicated to mastering advanced techniques in real-world attack simulations . My passion for cybersecurity is driven by a hands-on approach to learning, and I continuously hone my skills through labs, CTFs, and personal projects., I aim to contribute to securing organizations through proactive and thorough security assessments.
Overview
6
6
years of professional experience
7
7
Certifications
2
2
Languages
Work History
Bug Hunter
HackerOne
09.2022 - Current
- Reported valid bugs to programs such as DOD Program and other private programs
- Performed manual and automated testing using tools like Burp Suite, Nmap, Recon-ng, ffuf, nuclei.
- Practiced OWASP Top 10 methodology and conducted extensive reconnaissance, fuzzing, and post-exploitation analysis .
- Wrote detailed, high-impact reports with proof-of-concept (PoC) scripts and remediation suggestions.
CTF Player
Hackthebox
03.2022 - 12.2024
- Solve the challenges in the field of information security to test and advance skills in Penetration Testing and Cybersecurity
- Collaborated with global community members in team-based competitions
- Gained deep practical experience in network enumeration, post-exploitation, and pivoting techniques .
- Emulated adversarial behavior using tools such as Burp Suite, Metasploit, nmap, Gobuster, LinPEAS/WinPEAS , etc.
Team Leader
InnovEgypt
08.2019 - 12.2019
- Set performance expectations for the team, monitoring progress towards goals and providing constructive feedback as needed.
- Enhanced team productivity by implementing efficient work processes and regularly reviewing performance metrics.
Education
Bachelor of Engineering - Telecommunications and Electronics Department
Mansoura College Academy
05-2023
Skills
Network Penetration Testing
Web Application Security Testing
Vulnerability Assessment & Exploitation
Post-Exploitation & Lateral Movement
Active Directory Penetration Testing
Privilege Escalation (Linux & Windows)
API Security Testing
OWASP Top 10
Reconnaissance
Bash Scripting
Certification
Practical Ethical Hacking, Tcm Security
Accomplishments
- Oracle Security Top Credit, CVE-2022-21500
Timeline
Bug Hunter
HackerOne
09.2022 - Current
CTF Player
Hackthebox
03.2022 - 12.2024
Team Leader
InnovEgypt
08.2019 - 12.2019
Bachelor of Engineering - Telecommunications and Electronics Department
Mansoura College Academy