May 2025 – Jan 2026 · 8 mos

• Mentoring students on Pwned Labs through Discord and other channels, offering guidance and support with red teaming labs and challenges, including cloud environments such as Azure, AWS, and GCP..
• Collaborating with Pwned Labs team to beta test upcoming labs and provide feedback to improve lab quality and learning experience.
• Granted full access to advanced and business-level labs as part of the student mentor responsibilities.

May 2025 – Jul 2025 · 2 mos · Tanger-Tetouan-Al Hoceima, Morocco

• Conducted comprehensive manual penetration testing on web applications using Burp Suite to identify vulnerabilities including XSS, SQL injection, and authentication bypass issues.
• Performed detailed source code reviews of PHP and Laravel applications to uncover logic flaws, insecure data handling, and potential privilege escalation vulnerabilities
• Collaborated with development teams to provide actionable remediation recommendations, resulting in the secure patching of identified security issues before production deployment.
• Documented findings in detailed security assessment reports, including risk ratings, proof-of-concept exploits, and stepby-step remediation guidance.

Aug 2024 – May 2025 · 9 mos · Nador

• Developed a 𝗖𝗧𝗙 platform similar to 𝗛𝗮𝗰𝗸 𝗧𝗵𝗲 𝗕𝗼𝘅, inspired by my active participation in many Hack The Box CTF challenges. Based on this experience, I designed and built a Moroccan version of the platform called 𝗛𝗮𝗰𝗸𝗠𝗼𝗿𝗼𝗰𝗼.
• I created multiple web and cloud security labs, worked on realistic attack scenarios, and performed code reviews to ensure quality and security. The platform is fully functional and focused on hands-on learning in offensive security and real-world penetration testing.