Kareem Ezz

Performed a full penetration test on a client’s e-commerce platform covering OWASP Top 10 vulnerabilities.

Techniques: SQLi, XSS, CSRF, Authentication Bypass

Result: Discovered 12 vulnerabilities and provided a remediation plan that improved security posture by 80%

Developed a Python-based reconnaissance tool that automates subdomain enumeration, port scanning, and service detection.

Technologies: Python, Nmap, Sublist3r APIs

Result: Reduced recon time by 60% for penetration tests

Led a Red Team exercise simulating real-world attacks to test organizational defense mechanisms.

Scope: Social Engineering, External/Internal Pentest, Lateral Movement

Result: Exposed gaps in monitoring and incident response; client implemented SIEM & EDR solutions