Mohamed Said M'Bareck Email & Phone Number

Nouakchott, Mauritania

Nouakchott, Mauritania

Remote

During this job I've worked on things like:System Hardening (ssh hardening, whmcs hardening, wordpress site hardeing, cpanel hardening, linux server ... )- Web app pentesting- Linux Server administration- iRedMial Server setup & administration- Backup & Restoration management- Incident response, and system rehabilitation- WHMCS configuration and management- Infrastructure update & upgrade- Cpanel accounts administration & management- Cpanel Server… Show more During this job I've worked on things like:System Hardening (ssh hardening, whmcs hardening, wordpress site hardeing, cpanel hardening, linux server ... )- Web app pentesting- Linux Server administration- iRedMial Server setup & administration- Backup & Restoration management- Incident response, and system rehabilitation- WHMCS configuration and management- Infrastructure update & upgrade- Cpanel accounts administration & management- Cpanel Server migration from one cloud to another cloud (VPS)- Migration from Centos 8 to AlmaLinux OS- DNS management & configuration- Company Website administration & maintenance Show less

Casablanca, Morocco

This internship was about conducting a Web penetration testing on MyTower solution, which is a Transport (TMS) and Global Trade Management (GTM) platforms and software publisher.Reported bugs - Account Take over through IDOR- Account Take over through password change functionality.- Unrestricted file upload, leads to : XSS (can steal user access token from local storage ), site defacing, Illegal server storage usages.- JWT misconfiguration leads to horizontal… Show more This internship was about conducting a Web penetration testing on MyTower solution, which is a Transport (TMS) and Global Trade Management (GTM) platforms and software publisher.Reported bugs - Account Take over through IDOR- Account Take over through password change functionality.- Unrestricted file upload, leads to : XSS (can steal user access token from local storage ), site defacing, Illegal server storage usages.- JWT misconfiguration leads to horizontal privileges escalation.- Sensitive Data Exposure through Stack Errors and parameters altering - Denial Of Service: combination of many separate bugs, 1. unprotected logout function, 2. unrestricted file upload and 3. XSS leads to DOS attack.- No Brute-Force protection- Sensitive Information Disclosure : hashed password , server version - Required fields bypass-Absence of security header: STSHKeywords- Burp suite, ZAP Proxy - OWASP WSTG- whatweb, wappalyzer, nmap, nslookup, dig- nikto, dirb, gobuster, ffuf, linkfinder- curl, crunch, bash scripting- sqlmap, XSSer, xsssniper- Firefox Multi-Account containers, Firefox Developer Tools Show less

Nouakchott, Mauritania

Final goal : developing a Web based Servers management applicationKeywords - Laravel framework (PHP), Bootstrap, JQuery- HTML, CSS, JS, Flaticon- SQL, ORM, MYSQL

Nouakchott, Mauritania

Teaching the basic of programming in both C & JAVA SE languageskeywords -Java SE, JavaFX- C (basic, pointer, structure ...)-OOP

Nouakchott, Mauritania

Internal salary management application keywords - Kotlin, Java ME-XML, SQLite

Master'S Degree, Mastère Professionnel En Sécurité Des Systèmes Et Des Réseaux Informatiques Mpssri

Activities and Societies: post redacteur de l'AESAT section Gabes Promotion major

Licentiate Degree, Développement Et Administration Internet Et Intranet (Da2I)

Promotion major