CyberTEK 3.0 - PWN Writeups
Writeups for the four pwn challenges from CyberTEK 3.0.
View Post →About
Aut viam inveniam aut faciam
Visitors
11096
unique visitors
113
countries
CTF Achievements
────
podium & top finishes
─────────────
- 1ST Black Hat MEA 2025 Quals · MEA region · top 15 globally
- 1ST CyberTEK 3.0
- 1ST Securinets Tekup Spooky CTF
- 2ND G-CUP 2026 CTF
- 3RD CSAW 2025 finals
- TOP 4 BrunnerCTF · 1,158 teams
- TOP 17 DEF CON 34 Quals
────
international finals · qualified
─────
- Black Hat MEA finals 2026
- Black Hat MEA finals 2025
- Cyber Tech Olympics 2025
- ASCW finals 2025
- CSAW finals 2025
Latest Posts
View All Posts (11)Securinets Darkest Hour 2026 - Pwn Writeups
I will only post writeups for blooded challenges. I will release the others once someone bloods them.
View Post →Securinets Friendly 2025 - Pwn Writeups
This post contains quick writeups for all the binary exploitation (pwn) challenges from the Securinets Friendly 2025 CTF competition. The challenges a...
View Post →Experience
-
Securinets
September 2024 – Present · 2 roles-
Technical Lead July 2026 - Present
-
Technical Instructor September 2024 - June 2026
- Sustained 100% uptime at events hosting 400+ participants by operating isolated, containerized challenge infrastructure with automated deploy and teardown.
- Delivered hands-on secure-coding and binary-exploitation workshops to students from 10+ universities.
- Authored exploitation and reverse-engineering challenges modeling real-world memory-safety and logic flaws.
-
-
EY
-
Security Engineering Intern June 2026 - August 2026
- Designed and threat-modeled Bastion, a hardened Linux platform that delivers encrypted competition content and blocks AI-assisted cheating through kernel lockdown, LSM execution policy, egress allowlisting, and TPM 2.0 attestation.
- Engineered the key-release pipeline (AES-256-GCM, per-user HKDF keys, HashiCorp Vault/HSM, mutual TLS 1.3), ensuring no key material ships in the image and a compromised session cannot expose another user's content.
- Penetration-tested an Android banking app and its backend, identifying 3 exploitable vulnerabilities, including missing admin-console MFA and an email-flood DoS.
-
-
Cargo One Express
-
Web Security Engineer October 2025 - December 2025
- Shipped the company's internal recruitment platform end to end, adding OAuth 2.0 authentication and encrypted at-rest storage so applicant documents and PII were never stored in plaintext.
- Enforced least-privilege role-based access control with server-side authorization on every API endpoint, preventing cross-account reads of applicant records.
-
-
FL1TZ
-
CTF Player September 2024 - Present
- Consistently achieved top rankings in competitive CTFs at both national and international levels.
- Qualified for prestigious competitions including Arab Security Cyber Wargames, Blackhat, Cybersecurity Tech Olymics & CSAW
- Specialized in Pwn and Reverse Engineering categories across multiple CTF formats
-
-
INSAT
-
ICT Engineering Student September 2023 - June 2028
- Pursuing a National Engineering Diploma (Diplôme National d'Ingénieur): five-year integrated program, equivalent to a Master's degree
- Relevant coursework: Ethical Hacking & Cybersecurity, Operating Systems & Virtualization, High-Speed Networks, Algorithms & Data Structures
- Languages: Arabic (native), English (fluent), French (basic)
-
-
Phantom Penguin
-
Lead Game Developer November 2020 - 2022
- Led a cross-functional team of 6 developers to deliver 5+ desktop and mobile game titles from concept to release.
- Coordinated task allocation and conducted structured code reviews, increasing team productivity by ~40%
- Stabilized release builds through systematic testing and pre-release triage, achieving 100% on-time deliveries
-