Senior VAPT Consultant and offensive security practitioner specializing in exploit development, penetration testing, and malware analysis/development.
What I Do
I break things for a living, then explain how to fix them. My work sits at the intersection of vulnerability research, exploit development, and red team operations. Currently a Senior VAPT Consultant, where I lead engagements across web applications, networks, mobile platforms, and beyond.
Outside of client work, I develop exploits, bug hunting, reverse-engineer binaries, build tooling, and occasionally write about it here.
Certifications
Offensive Security
- OSCE³ (OSED + OSWE + OSEP)
- OSCP
SANS
- GMOB - Mobile Device Security Analyst
- SEC760 - Advanced Exploit Development
INE / eLearnSecurity
- eWAPTX - Web Application Penetration Tester eXtreme
- eCMAP - Certified Malware Analysis Professional
- eCXD - Certified eXploit Developer
- eJPT - Junior Penetration Tester
Other
- CRTP - Certified Red Team Professional
- CRTO - Certified Red Team Operator
Highlights
- Second person globally to complete the SANS SEC760 (Advanced Exploit Development) challenge coin
- Third honor, Bachelor's degree from King Fahd University of Petroleum & Minerals
Connect
- X/Twitter: @ahmed_vapt
- LinkedIn: alshammaria
This blog covers exploit development, vulnerability research, malware analysis, and offensive security techniques. Subscribe to get new posts delivered to your inbox.