Mahmoud Abd Alkarim

Offensive Security.
could be in your computer and you wouldn't know.

#OSINT_بالعربي

[Mahmoud Abd Alkarim @Maakthon]

@kabir_haidar_01 @Swisscom @ethical_h4ck3r_

[Mahmoud Abd Alkarim @Maakthon]

March results: 7 vulnerabilities reported in @Swisscom

* 2 Account Takeover (OAuth)+2 fix bypasses
* 1 SSRF (internal systems)
* 1 Broken Access Control (delete any account)
* 1 Stored XSS
* 1 Reflected XSS
* 1 Credential Disclosure

Thanks to Swisscom security team
#bugbounty

[Mahmoud Abd Alkarim @Maakthon]

@kabir_haidar_01 @Swisscom @ethical_h4ck3r_ From my experience in swisscom, They are professional and take care of everything

[Mahmoud Abd Alkarim @Maakthon]

@albinowax Congrats 🎊

[Mahmoud Abd Alkarim @Maakthon]

@albinowax @vulnverse0 How many 😂

[Mahmoud Abd Alkarim @Maakthon]

Any update? --> ×
Any update before world war 3 --> ✓

[Mahmoud Abd Alkarim @Maakthon]

Lately, I don’t have the patience to read long articles anymore.
Instead, I collect multiple articles on a single topic (like SSRF vulnerabilities), feed them into #NotebookLM, and it generates an audio discussion with two speakers.
This feels absolutely insane 🤯

[Mahmoud Abd Alkarim @Maakthon]

#EDEX2025

[Mahmoud Abd Alkarim @Maakthon]

🚀 Built GoTel Cloud - a free platform for devs & security researchers to capture, inspect & analyze web requests in real-time.

Now in beta → https://t.co/5vFbKWftsF

[Mahmoud Abd Alkarim @Maakthon]

@samwcyo So Interested

[Mahmoud Abd Alkarim @Maakthon]

@tbbhunter @intigriti You can use this tool:
https://t.co/E2DFcEN9PR

[Mahmoud Abd Alkarim @Maakthon]

@FlEx0Geek جميل جدا, مقاله مفيده. عاااااش

[Mahmoud Abd Alkarim @Maakthon]

@albinowax Good luck with your next move 👏🏼

[Mahmoud Abd Alkarim @Maakthon]

@albinowax

[Mahmoud Abd Alkarim @Maakthon]

@BSidesCbr @infosec_au Good luck 🤞🏼

[Mahmoud Abd Alkarim @Maakthon]

@djurado9 @Xbow A game changer! to be honest the future is scary :D

[Mahmoud Abd Alkarim @Maakthon]

@intigriti Hello, You can easily use this python tool, It will return the potential origin ip

https://t.co/E2DFcEN9PR

[Mahmoud Abd Alkarim @Maakthon]

@0xLupin Hello, You can easily use this python tool, It will return the potential origin ip

https://t.co/E2DFcEN9PR

[Mahmoud Abd Alkarim @Maakthon]

@Xbow impressive!

[Mahmoud Abd Alkarim @Maakthon]

Give it a try you will love it, It open new attack surface.
@GodfatherOrwa @haxor31337 @NahamSec @0x_rood @sl4x0 @Melotover @lu3ky13 @KN0X55 @jayesh25 @Mohamed87Khayat @SirBagoza

[Mahmoud Abd Alkarim @Maakthon]

#OriginIP: is a powerful recon tool for uncovering real IP addresses behind domains protected by Web Application Firewalls (WAFs) or CDNs such as Cloudflare, Akamai, and others.

Link: https://t.co/E2DFcEN9PR