ahmed el-sharqawy

Web Application Penetration Tester focused on identifying and assessing security vulnerabilities in modern web applications.
I have hands-on experience in web application security testing, vulnerability research, and bug bounty methodologies, with a focus on areas such as Broken Access Control, IDOR, Authentication & Authorization flaws, XSS, Business Logic vulnerabilities, and Information Disclosure.
I work with industry-standard security tools including Burp Suite, Nmap, ffuf, dirsearch, nuclei, and Python to support manual testing, automation, and vulnerability validation.
I continuously develop my skills through practical labs, security research, personal projects, and responsible vulnerability disclosure programs.
Passionate about improving application security and contributing to security teams by helping identify, analyze, and remediate real-world vulnerabilities.