About Me
I’m Abderrahmane Abdoullah, a cybersecurity consultant and penetration tester based in Morocco. I focus on offensive security — web application testing, API security, binary exploitation, and bug bounty. I currently work as a Security Researcher at WePWN and study Software Engineering at 1337 (42 Network).
I think like an attacker: enumerate everything, read every response carefully, and exploit with precision instead of guessing.
Experience
Security Researcher — WePWN (Jan 2025 – Present, Remote)
- Vulnerability research and penetration testing on web applications and APIs — SQL injection, XSS, SSRF, IDOR, and authentication bypass.
- Reconnaissance, fuzzing, and proof-of-concept exploit development.
- Detailed technical reports with remediation guidance.
- Collaborate with the WePWN community on techniques and responsible disclosures.
Bug Bounty Hunter — Bugcrowd (2025, Remote)
- Reported multiple vulnerabilities including Reflected XSS and HTML Injection in the NASA bug bounty program.
- Targeted recon and payload crafting to confirm exploitability and assess impact before responsible disclosure.
Education
- 1337 (42 Network) — Software Engineering (2024 – present)
- Lycée Ibn Mandour — Baccalaureate (2021)
Selected Projects
- SOC Simulator Platform — a Security Operations Center simulator replicating real-world threat detection and incident response, with log analysis, alert triage, and attacker simulation modules.
- bashLite (C) — a UNIX-like shell supporting pipes, redirections, environment variables, and command parsing.
- Docker Infrastructure — a multi-service Docker Compose stack (NGINX, WordPress, MariaDB) with secure inter-container networking, volume persistence, and TLS.
- Born2beroot — a hardened Debian VM with strict security policies, SSH hardening, password policy, and firewall rules.
Achievements
- 🥇 1st Place — IDEH CTF by CIT INPT
- 🥉 3rd Place — Morocco Blockchain & Cryptocurrency Days CTF
- 🏁 Finalist — Cyber Odyssey 2025 (Morocco’s largest cybersecurity event)
Skills
Offensive Security: web app testing, directory brute-forcing, vulnerability assessment, exploit development, CTF Programming & Scripting: C, Python, Bash, JavaScript / Node.js, beginner PHP Systems & Hardening: Linux security, Debian, Docker & containerization, networking, secure coding Concepts: authentication, authorization, session management, encryption, privilege escalation