In 2016, I joinedGratipay’s Blue Team where Ioperated their bug bounty programme. Subsequently, in 2018, I joinedHackerOne as a Security Analyst. While atHackerOne, I had the privilege of triaging in-person alongside organisationssuch as GitHub, Salesforce, and the United States Marine Corps.

Currently, I am a Senior Pentester atCure53, where I usemy expertise to help clients strengthen their security posture by conductingsecurity audits and source code reviews.

Outside of work, I enjoy staying active and maintaining a strong dedication toswimming, honed during my time as a studenton theUniversity of Warwick’sSportsScholarshipprogramme.

edoverflow.com •LinkedIn

PinnedLoading

1. securitytxt/security-txtsecuritytxt/security-txtPublic

   A proposed standard that allows websites to define security policies.

   HTML 1.8k 78

2. can-i-take-over-xyzcan-i-take-over-xyzPublic

   "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

   Python 5.5k 784

3. contact.shcontact.shPublic

   An OSINT tool to find contacts in order to report security vulnerabilities.

   Shell 268 49

4. legal-bug-bountylegal-bug-bountyPublic

   #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.

   73 22

5. securitytxt/securitytxt.orgsecuritytxt/securitytxt.orgPublic

   Static website for security.txt.

   HTML 68 36