Security Researcher · Cryptographer · AI Security · Builder
I work in the intersection of cryptography, offensive security, and AI. Currently finishing a BSc in Networks and Information Security Engineering at PSUT, with a 3-year streak as an Outstanding Student. I build CTF challenges, break things professionally, and ship production systems that use ZK proofs.
| 🥈 2nd Place Worldwide | Global CPTC 2025, AI Security Lead |
| 🥇 1st Place | Arab Security Cyber Wargames 2025, 426 Teams |
| 🌐 16th Place Globally | Black Hat MEA CTF 2024 |
| 🛡️ 4th Place | NCSC CTF 2024, National |
| 🏆 85+ CTF Challenges Authored | Used across PSUT CTFs, PwnSec CTF, Playgrounds CTF, META |
| 👥 800+ Students Reached | As President of PSUT Cybersecurity Club |
| 📜 eWPTX Certified | Web Application Penetration Tester eXtreme, eLearnSecurity |
MedZK: Privacy-preserving medical research platform. Researchers verify patient eligibility using ZK-STARK proofs without ever seeing raw health records. 3-org Hyperledger Fabric network, TSS oracle layer, full production deployment.
ZKP CTF Challenge: A 9/10 difficulty CTF challenge combining Pedersen commitments, Bulletproof inner product arguments, and a truncated LCG lattice attack. Players get a PyInstaller ELF and no source. Solving it requires LLL + BSGS.
Languages Python · C · C++ · TypeScript · Bash · Assembly (x86) · SageMath
Security & Pentesting Burp Suite · Metasploit · Ghidra · GDB/GEF · pwntools · sqlmap · Wireshark · Nmap · Kali Linux
Cryptography ZK-STARKs · ECC · RSA · Threshold Signatures · Zero-Knowledge Proofs · LFSRs · Bulletproofs
Domains Web App Pentesting · Binary Exploitation · Reverse Engineering · AI / LLM Security · Network Security · Prompt Injection · Agentic AI Attacks
Infrastructure Docker · Linux · Hyperledger Fabric · Microsoft Azure · Node.js · React
| Repo | Description |
|---|---|
| My-CTF-Challenges | 85+ original CTF challenges covering ECC, RSA, ZKP, LFSRs, and binary exploitation. Used in PSUT CSC CTF, PwnSec CTF 2024, Playgrounds CTF 2024. |
| Embedded-Systems-Electric-Service-Dog | Microcontroller-based assistive device, an embedded system that mimics a service animal to support independent living. |
| Challenge | Competition | Topic |
|---|---|---|
| Justice — ECDSA Hidden Number Problem | ASCWG 2025 | ECDSA nonce bias, lattice reduction, private key recovery |
| secret² — Bivariate Coppersmith | l3ak CTF 2025 | Bivariate Coppersmith over 1337-bit prime |
| Unbreakable — Pohlig-Hellman on TLS DHE | ASCWG 2024 | Smooth-order prime, discrete log, TLS traffic decryption |
| kleinvieh_2 — Cubic RSA & Coppersmith Variants | CTF | Five RSA schemes broken with Coppersmith |
| quickprime — LCG-generated RSA primes | LACTF 2025 | Related primes via LCG, 2-adic integer solving |
- How Encrypted Messaging Apps Work: Technical breakdown of Signal Protocol, X3DH, Double Ratchet, and MTProto 2.0. Published on josa.ngo.
- Secrecy: From a Human Instinct to Science: Talk at XPANDconf (1,300+ attendees) on the Arab scholars who invented cryptanalysis a thousand years before the internet.
- Cryptography Notes: Public notes on symmetric crypto, RSA, ECC, ZKPs, and PRNGs. Math-heavy, CTF-practical.
Security Researcher · Jordan 🇯🇴 · Open to roles in security research, AI security, cryptography, and red teaming