Name : Ali Al-Mansori
Handle : AliAlMansoriSec
Role : Security Researcher / Offensive Security Analyst
Speciality : Web β’ API β’ Android Security β’ Bug Bounty
Experience : Since 2023
Platform : Ψ§ΩΩΩΨ± Ψ§ΩΨ³ΩΨ¨Ψ±Ψ§ΩΩ β Cybersecurity Education (Arabic)
Status : Open to Remote Freelance & Collaboration
β Exploitation & Testing β
β Recon & OSINT β
β Android & Mobile β
β Automation & Scripting β
| # | Project | Description | Status |
|---|---|---|---|
| 01 | π§ Web Pentest Methodology | Full professional workflow: Recon β Enumeration β Exploitation β Reporting | β Active |
| 02 | βοΈ WPT-Workflow-Manager | Automation scripts for pentest workflow, project structure & recon ops | β Active |
| 03 | π OWASP Web Top 10 β Deep Dive | Full notes per vulnerability: definition, real examples, detection, exploitation, fix | π In Progress |
| 04 | π OWASP API Security Top 10 | Complete API security notes with labs: crAPI, DVWS, PortSwigger | π Planned |
| 05 | π± Android Pentesting Notes | Methodology + tools + real APK analysis labs | π Planned |
| 06 | π CTF Writeups | Documented solutions for TryHackMe, HackTheBox, and competitions | π Planned |
| 07 | π Bug Bounty Findings | Real-world vulnerability reports (HackerOne / Bugcrowd) | π Planned |
No certification is just a paper β here is the actual knowledge, documented.
| Certification | Topics Covered | Notes | Status |
|---|---|---|---|
| eJPT (eLearnSecurity) | Network pentesting, web basics, enumeration | π Notes | π Planned |
| OSWA (Offensive Security) | Web app attacks, advanced exploitation | π Notes | π Planned |
| PNPT (TCM Security) | Full pentest cycle, reporting, OSINT | π Notes | π Planned |
| CEH | Security concepts, ethical hacking theory | π Notes | π Planned |
2023 βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ NOW
β
ββ β
Web Pentesting Foundation
ββ β
Built: Web Pentest Methodology (GitHub)
ββ β
Launched: Ψ§ΩΩΩΨ± Ψ§ΩΨ³ΩΨ¨Ψ±Ψ§ΩΩ Platform
ββ β
Tools Mastery: Burp, Nmap, SQLMap, FFUF, Nuclei
β
ββ π OWASP Web Top 10 β Full Documentation
ββ π
OWASP API Security Top 10 β Full Documentation
ββ π
Android Pentesting β Notes & Labs
ββ π
CTF Writeups (TryHackMe / HackTheBox)
ββ π
Bug Bounty β First Finding (HackerOne / Bugcrowd)
ββ π
Build Volunteer CTF Team (Ψ§ΩΩΩΨ± Ψ§ΩΨ³ΩΨ¨Ψ±Ψ§ΩΩ community)
ββ π
Remote Freelance Position β Web & API Pentester
|
π Personal Portfolio |
π§ Ψ§ΩΩΩΨ± Ψ§ΩΨ³ΩΨ¨Ψ±Ψ§ΩΩ |