root@0xbartita:~$ _
Ahmed Abdel Rasoul

Ahmed Abdel Rasoul

>

Breaking things to make them safer.

Whoami Read Blog Get in Touch

BLOGS

When the AI Assistant Skips the Permission Checks the Rest of the App Follows
Sep 8, 2026 4 min read

When the AI Assistant Skips the Permission Checks the Rest of the App Follows

I found an AI summary button on an identity platform that typed out an applicant's full SSN for me — even though my account was blocked from seeing SSNs. Here's how it happened.

Writeups Broken Access Control AI
How I Chained 2FA Bypasses in a Crypto P2P System to Drain User USDT
Jul 24, 2025 2 min read

How I Chained 2FA Bypasses in a Crypto P2P System to Drain User USDT

How I chained two logic flaws in a crypto P2P platform — frontend-only 2FA and poor session isolation — to add a payout method to a victim's account and sell their USDT without ever passing OTP.

Writeups 2FA Bypass Crypto
Bypass WAF by a Simple Trick — Gained $1000 Bounty
Sep 3, 2023 3 min read

Bypass WAF by a Simple Trick — Gained $1000 Bounty

How I bypassed Cloudflare WAF protection by finding the origin IP and modifying the HOST header — a simple trick that earned a $1000 bounty.

Writeups WAF Bypass Cloudflare
How I Got Two RCE at a BBP Program
Aug 10, 2023 3 min read

How I Got Two RCE at a BBP Program

Discovering two Remote Code Execution vulnerabilities in a bug bounty program using Shodan recon and default SAP Commerce credentials.

Writeups RCE SAP Commerce
View all writeups →

WHOAMI

Penetration Tester with 500+ vulnerabilities reported across HackerOne, Bugcrowd, HackenProof and Immunefi. Responsibly disclosed issues to Binance, Oracle, VMware, Huawei and John Deere. Specialized in web, API and mobile application security, with a strong focus on business logic flaws, authorization and authentication bypasses, IDORs and API abuse. Also experienced in Active Directory penetration testing and source code review.

Location Cairo, Egypt
Languages Arabic (Native) & English (Professional)
Education Computer Science — Arab Open University
0+ Vulnerabilities
0+ Reputation
0+ Hall of Fames
0 CVE Published

ACTIVITY

Bug bounty tips and field notes, posted as I find them — follow on X

EXPERIENCE

Bug Bounty Hunter

5+ years
HackerOne Bugcrowd HackenProof Immunefi
Ranked #31 on HackenProof Leaderboard (2025)
Top 3 on Binance Bug Bounty Program
Top 10 on HackerOne's iOS Mobile App leaderboard
Top 10 for Android assets on HackerOne (Q1 2026)
2220+ reputation on HackerOne
Crossed 1,000 reputation (#1) on a fintech private BBP
500+ reported vulnerabilities across platforms
Custom recon, subdomain monitoring & vulnerability automation — built an AI-agent Android bot that scans whole APKs and has landed a lot of bounties

HALL OF FAME & AWARDS

John Deere

Bug Bounty Program swag for responsible disclosure
Oracle

Acknowledged in Oracle's Critical Patch Update — On-Line Presence Security Contributors
HackenProof

Ranked #31 Worldwide on the 2025 leaderboard

  • Case study: chaining 2FA bypasses to drain funds on a 2M-user crypto P2P platform
  • Weekly Leaderboard — Ranked #1
  • Weekly Leaderboard — Ranked #3
Binance

Top 3 Researcher in Binance Bug Bounty Program

Huawei

Two official acknowledgment letters for accepted vulnerability reports
VMware

Official swag for responsible disclosure of a security issue

CVE DISCOVERIES

1 CVE Discovered and Counting...

RCE
CRITICAL

CVE-2026-23524

Laravel Reverb · Insecure Deserialization

with Mohammad Yaser

Disclosed NVD

PROJECTS

h1-asset-fetcher

Fetches, downloads, and decompiles Android/iOS/exe assets from HackerOne bug bounty programs.

Cookie-Swapper

Burp Suite extension that automates session token swapping across Burp tabs during security testing.

h1-monitor

Self-hosted bot that watches HackerOne programs for scope changes and pushes them to Telegram, 24/7.

CERTIFICATIONS

eMAPT

Mobile Application Penetration Tester

INE Security

eWPTX

Web Application Penetration Tester eXtreme

INE Security

eCPPT

Certified Professional Penetration Tester

INE Security
Soon

OSCP

Offensive Security Certified Professional

OffSec

CONTACT

connect.sh

$ ssh 0xbartita@connect

Connecting to 0xbartita...

Connection established.

$ cat contact_info.txt

[email protected]

a_7_m_e_d_

github.com/0xbartita

linkedin.com/in/0xbartita

x.com/0xbartita

$ _