Mazin Ahmed

Cyber Security Engineer (Offensive Security)

Honors & Awards

U.S. Department Of Defense - Security Acknowledgement (2017)
U.S. Department Of Defense
https://hackerone.com/deptofdefense/thanks

Souq Security Acknowledgement (2017)
Souq
https://hackerone.com/souq/thanks

Symantec Security Acknowledgement (2017)
Symantec
https://www.symantec.com/connect/pages/security-researcher-wall-fame

Facebook WhiteHat (2014, 2016)
Facebook
https://www.facebook.com/whitehat/thanks
http://blog.mazinahmed.net/2014/06/my-story-with-onavo-facebooks.html

Twitter Security Acknowledgement (2014, 2016) - 2 Times
Twitter
https://hackerone.com/twitter/thanks/prior

Mozilla Hall of Fame - Q4 2014
The Mozilla Foundation
https://www.mozilla.org/en-US/security/bug-bounty/web-hall-of-fame/

Hack In The Box 2019 – AI Competition – Finalist
Hack in The Box

I developed with my team a fully-automated host exploitation and post-exploitation tool that uses AI for predicting the best exploit against the target, where we were selected as the finalists.

Oracle Security Acknowledgement (2014)
Oracle
http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/2188432.xml

Top Web Hacking Techniques of 2015 - 4th Place
Top Web Hacking Techniques Award

My research on "Evading All Web-Application Firewalls XSS Filters" won the 4th place on Top Web Hacking Techniques of 2015 award.

https://www.whitehatsec.com/blog/top-10-web-hacking-techniques-of-2015/

Pwnie Awards - Best Client-side Bug of 2015 - Nominator (2015)
Pwnie Awards

My finding of CVE-2014-9414, W3 Total Cache CSRF that leads to total defacements of websites has been nominated for the best client-side bug of 2015 in Pwnie Awards. The award is given to the person who discovered or exploited the most technically sophisticated and interesting client-side bug.

https://pwnies.com/archive/2015/nominations/

Avira Security Acknowledgement (2016)
Avira
Avira Acknowledgement Certificate

ESET Security Acknowledgement (2015)
ESET
ESET Acknowledgement Certificate

Adobe Security Competition 3rd Place (2015)
Adobe

Adobe made a private security competition in May 2015. It was made with the partnership of Bugcrowd platform. I have won 3rd place in the competition.

Yandex Hall of Fame (2016)
Yandex
https://yandex.com/bugbounty/hall-of-fame/2016/6/

AT&T Hall of Fame (2017)
AT&T
https://bugbounty.att.com/hof.php

Sony Hall of Fame (2014)
Sony
https://secure.sony.net/hallofthanks

ProtonMail’s Hackathon - 2nd Place (2014)
ProtonMail

ProtonMail held a hackathon in 2014. The goal of the hackathon was to identify security vulnerabilities and attacks against ProtonMail initial beta build. I won the 2nd place in the hackathon.

LinkedIn Security Acknowledgement (2014) - 2 Times
LinkedIn

Ebay Security Acknowledgement (2014)
Ebay

Bugcrowd Security Acknowledgement (2014-2015) - 3 Times
Bugcrowd
https://bugcrowd.com/bugcrowd/hall-of-fame

Tagged Security Acknowledgement (2014) - 15 Times
Tagged
https://bugcrowd.com/tagged/hall-of-fame

PureVPN Security Acknowledgement (2014) - 10 Times
PureVPN
https://bugcrowd.com/purevpn

GreenHouse.io Security Acknowledgement (2014)
GreenHouse
https://hackerone.com/greenhouse/thanks

Pocket Security Acknowledgement (2014)
Pocket
https://help.getpocket.com/article/870-pocket-security-overview

LookOut Security Acknowledgement (2014)
LookOut
https://hackerone.com/lookout/thanks

DropMyEmail Security Acknowledgement (2014)
DropMyEmail
https://www.dropmyemail.com/security

MailChimp Security Acknowledgement
MailChimp
http://mailchimp.com/about/security-response/

ABN AMRO Bank Security Acknowledgement (2014) - 2 Times
ABN AMRO Group

The Mastercoin Foundation Security Acknowledgement (2014)
The Mastercoin Foundation

MediaFire Security Acknowledgement (2014)
MediaFire

Avast Security Acknowledgement (2014)
Avast

PagerDuty Security Acknowledgement (2014) - 2 Times
PagerDuty