Hamza.Sakhi
~$ whoami
> Breaking web, API, mobile, Active Directory and infrastructure so they hold up in production.
- PortSwigger Hall of Fame
- #24
- PortSwigger Hall of Fame
- CVE Discovered
- 1
- CVE Discovered
- Years offensive security
- 4+
- Years offensive security
- Security certifications
- 15
- Security certifications
$ cat services.md
What I can break for you
I run penetration testing contracts across web, API, mobile, cloud and internal infrastructure environments. Every engagement ships with a written report: findings, CVSS-rated risk, business impact, reproduction steps and remediation guidance your team can act on.
$ burpsuite --target web
Web Application Pentesting
Full grey/black-box assessments mapped to OWASP Top 10 and ASVS. Authentication and session flaws, access control bypass, injection, SSRF, business-logic abuse — with reproduction steps a developer can actually follow.
- Burp Suite
- sqlmap
- ffuf
- OWASP ASVS
$ ffuf -w endpoints.txt -u $API
API Security Testing
REST and GraphQL testing against the OWASP API Top 10: broken object-level authorisation, mass assignment, rate-limit and token weaknesses, and undocumented endpoints found through active discovery.
- REST
- GraphQL
- BOLA
- JWT
$ frida -U -f com.target.app
Mobile Application Security
Android and iOS assessments covering insecure storage, certificate pinning bypass, root/jailbreak detection, IPC exposure and hardcoded secrets — static analysis plus runtime instrumentation.
- MobSF
- Frida
- Android
- iOS
$ crackmapexec smb $RANGE --gen-relay
Infrastructure & AD Pentesting
Internal network and Active Directory assessments: domain enumeration, Kerberoasting, NTLM relay, GPO abuse, lateral movement and privilege escalation to Domain Admin — with clear remediation for each attack path.
- Active Directory
- Kerberos
- CrackMapExec
- BloodHound
$ ./redteam.sh --assume-breach
Red Team & Adversary Simulation
Objective-driven engagements that test detection and response, not just patch levels: initial access, lateral movement, privilege escalation and exfiltration, mapped to MITRE ATT&CK.
- MITRE ATT&CK
- C2
- Phishing
- AD
$ cloud-enum --assess all
Cloud Security Assessment
Multi-cloud security reviews across AWS, Azure and GCP: IAM privilege-escalation paths, over-permissive policies, exposed storage, misconfigured network boundaries and logging gaps — reviewed against CIS Benchmarks with prioritised remediation.
- AWS
- Azure
- GCP
- CIS Benchmark
Need an assessment scoped?
Send me the target type and rough size — I'll come back with a scope, timeline and rate.