Mohamad Almasri

Implemented MITRE's CALDERA platform for automated adversary emulation based on the ATT&CK framework. This project involved setting up a controlled environment to simulate real-world attack scenarios and test defensive measures.

The CALDERA framework allowed me to create custom adversary profiles and execute attack chains that mimic the tactics, techniques, and procedures (TTPs) of known threat actors. This helped identify security gaps and validate detection capabilities.

Conducted SQL injection testing against vulnerable web applications to extract sensitive information from databases. This project involved identifying injection points, crafting payloads, and demonstrating the potential impact of successful exploitation.

I performed both manual and automated testing to identify various types of SQL injection vulnerabilities, including error-based, blind, and time-based injections. The findings were documented with proof-of-concept demonstrations and remediation recommendations.

Developed convincing fake online personas for social engineering operations and OSINT gathering. This project involved creating detailed backstories, digital footprints, and online presence for fictional characters to be used in authorized red team engagements.

The sock puppets were designed to appear legitimate and withstand basic verification checks, allowing for effective social engineering operations without raising suspicion. This project demonstrated the ease with which attackers can create convincing online identities.

Performed comprehensive enumeration, brute-force attacks, and exploitation of known vulnerabilities in a controlled Metasploitable2 environment. This project involved following a structured penetration testing methodology to identify and exploit various vulnerabilities.

The lab environment allowed for hands-on practice with different exploitation techniques, privilege escalation methods, and post-exploitation activities. The project demonstrated the importance of proper patch management and security controls.

Applied security best practices to virtual machine environments and implemented hardening measures based on industry standards. This project involved analyzing the default security configuration of VMware environments and implementing hardening measures based on industry standards.

The hardening process included configuring proper network segmentation, implementing least privilege access controls, securing the hypervisor, and establishing monitoring for suspicious activities. The project resulted in a significantly improved security posture for the virtualized environment.

Analyzed memory dumps from systems affected by ransomware and created custom YARA rules for detection. This project involved extracting indicators of compromise (IOCs) from memory and developing detection mechanisms for similar threats.

The forensic analysis revealed the ransomware's execution flow, persistence mechanisms, and network communication patterns. The custom YARA rules developed during this project were implemented in the organization's security monitoring tools to detect similar ransomware variants.

Conducted comprehensive network penetration testing using industry-standard tools to identify and exploit vulnerabilities in corporate networks. This project followed a structured methodology including reconnaissance, scanning, vulnerability assessment, exploitation, and reporting.

The penetration test uncovered several critical vulnerabilities including outdated services, weak authentication mechanisms, and misconfigurations that could be exploited to gain unauthorized access. Detailed remediation recommendations were provided to address each finding.

Performed comprehensive security assessment of web applications to identify and exploit vulnerabilities according to the OWASP Top 10. This project involved manual and automated testing techniques to discover security flaws in custom and commercial web applications.

The assessment uncovered multiple vulnerabilities including cross-site scripting (XSS), insecure direct object references (IDOR), and authentication bypass issues. Detailed exploitation proof-of-concepts were developed to demonstrate the severity of each finding.

Utilized various password cracking tools to analyze and recover passwords from different hash formats. This project involved developing efficient cracking strategies, creating custom wordlists, and implementing rule-based attacks to maximize success rates.

The project demonstrated the vulnerability of weak password policies and highlighted the importance of strong password requirements, proper hashing algorithms, and multi-factor authentication. The findings were used to improve the organization's password policy and user awareness training.