Ali Khafagy — Software Engineer
Proactive Offensive Security Engineer with over three years of professional experience in penetration testing and four years of active bug bounty research. I specialize in Web, Mobile, API, and Network security, with solid experience in Active Directory attack chain simulations. My journey in cybersecurity has been driven by a relentless pursuit of vulnerabilities, leading to significant discoveries in global organizations. I combine a researcher’s mindset with an engineer’s technical depth to secure complex infrastructures. Technical Expertise: - Offensive Security: Web/App Penetration Testing, Mobile Security (Android/iOS), Active Directory Exploitation (Kerberoasting, DCSync, Lateral Movement). - Vulnerability Management: Qualys VMDR, Nessus, CIS Benchmarks, and Authenticated Scanning. - R&D & Automation: Developing custom offensive tools (e.g., BashBard) using Python, Bash, and AI Integration. Bug Bounty Achievements: I have discovered valid and duplicated vulnerabilities in notable organizations such as: Nokia, Coca-Cola, IBM, LinkedIn, Airbnb, AT&T, Compass, IKEA, BugBountySA and more Knowledge Sharing: I am passionate about bridging the gap between theory and practice. As a Cybersecurity Instructor, I mentor the next generation of talent, and I actively share methodologies and insights on my technical blog (5afagy.github.io). Current Focus: Expanding my research into AI-driven Red Teaming and advanced Active Directory offensive techniques.
Stackforce AI infers this person is a Cybersecurity Specialist with a focus on Offensive Security and Vulnerability Management.
Location: 6th of October, Al Jizah, Egypt
Experience: 2 yrs 8 mos
Skills
- Penetration Testing
- Vulnerability Assessment
- Security Training
- Security Operations
- Network Security Implementation
- Network Design
- Log Analysis
- Web Application Security
- Digital Forensics
Career Highlights
- Over three years of experience in penetration testing.
- Significant bug bounty discoveries for global organizations.
- Passionate cybersecurity instructor mentoring future talent.
Work Experience
Konecta
Cyber Security Instructor (3 mos)
Cyber Force
Offensive Security Engineer (1 yr 5 mos)
AMIT Learning
Cyber Security Instructor (4 mos)
All Safe
Cyber Security Engineer (8 mos)
Fixed Solutions
SOC Analyst (1 mo)
Culture and Science City
Teaching Assistant (11 mos)
National Telecommunication Institute (NTI)
Advanced Cyber Security Trainee (3 mos)
CyberTalents
Cyber Security Bootcamp (2 mos)
Raya International Services
Call Center Agent (2 mos)
Education
Bachelor's degree at Culture and Science City
