Penetration Tester · Kuwait 🇰🇼

0xKhaled1

~$ █

13 years old · Top 4 Kuwait CyberTalents
eJPTv2 · CRTA · WEB-RTA · CMPen
HTB ProLab: XEN · P.O.O · Dante · Mobile PT

13 Years Old

#4 Kuwait CyberTalents

4+ Certs

22+ CTF Writeups

Writeups → Certs

Achievements

Certifications & Achievements

Internationally recognized certifications in Penetration Testing and Red Team operations.

eJPT — Junior Penetration Tester

INE Security · December 2025

✓ Completed

CRTA — Certified Red Team Analyst

CyberWarfare Labs · May 2026

✓ Completed

HTB ProLab — P.O.O

Hack The Box · January 2026

✓ Completed

HTB ProLab — XEN

Hack The Box · January 2026

✓ Completed

WEB-RTA — Web Red Team Analyst

CyberWarfare Labs · 2026

✓ Completed

CMPen — Certified Mobile Pentester

CyberWarfare Labs · July 2026

✓ Completed

CTF Writeups

Challenge Writeups

Writeups for top challenges I solved across various CTF competitions.

NetworkExploit3rs

Router Backdoor

Exploiting a hidden backdoor in router firmware to access the internal network.

WebExploit3rs

Catalyst Breach

Web app compromise via a logic flaw and privilege escalation.

WebExploit3rs

Noor Gate

Bypassing the auth gateway through a flaw in the verification mechanism.

CI/CDExploit3rs

Pipeline Phantom

Exploiting an exposed pipeline to access sensitive data in a CI/CD environment.

OSINTExploit3rs

Black Site

Complex OSINT challenge to uncover hidden information about a secret site.

WebExploit3rs

Sadaqah Drive

IDOR vulnerability in a donation platform exposing user data.

NetworkExploit3rs

Phantom Relay

SSRF exploitation via relay server to reach the internal network.

ScriptingExploit3rs

The Laylat Script

Analyzing and reversing an obfuscated script to extract the hidden flag.

CryptoExploit3rs

The Broken Crescent

Breaking a weak custom encryption algorithm to extract the secret message.

PwnTKBCTF

pyfsb

Exploiting a format string bug in a Python binary to achieve RCE.

WebTKBCTF

Patisserie

SQL injection in a bakery website to access sensitive data.

ForensicsTKBCTF

Dream of You

File analysis to find a hidden flag embedded via steganography.

MiscTKBCTF

capture-the-f-l-a-g

Misc challenge requiring out-of-the-box thinking to find the flag.

CryptoTKBCTF

Single Hint RSA

Breaking RSA encryption using a single hint and weak parameter selection.

WebRamadan CTF

Validator

Bypassing input validation to access the flag.

WebRamadan CTF

GiftForge

SSRF in a gift platform to exfiltrate data from internal servers.

PwnRamadan CTF

Ruby

Exploiting a Ruby runtime vulnerability to achieve code execution.

WebRamadan CTF

QuizApp

Stored XSS in a quiz app to steal the admin session.

MiscRamadan CTF

Zippy

Zip Slip vulnerability to write files outside the intended path.

RevRamadan CTF

JITstream

Reversing a custom JIT compiler to achieve code execution.

WebRamadan CTF

LosSantosCustoms

SQLi in a car platform to access customer data and the admin panel.

WebRamadan CTF

Notey

SSTI in a Jinja2 notes app to execute commands on the server.

View all Writeups on GitHub →

Expertise

Technical Skills

Areas of expertise in penetration testing and offensive security.

Web Application Pentesting90%

Active Directory Attacks80%

Privilege Escalation85%

Red Team Operations75%

Reverse Engineering65%

Python / Bash Scripting80%

Network Exploitation78%

Mobile Pentesting60%