ABOUT ME
Medhat Hassan
Offensive Security Engineer & Vulnerability Researcher
> whoami: Medhat Hassan (M_1337). I specialize in offensive security, application and API penetration testing, and vulnerability research. My work spans web and mobile security, Active Directory assessments, and AI-assisted vulnerability detection, with additional exposure to OT/ICS cybersecurity.
I completed a Computer Engineering degree and an ITI cybersecurity diploma, combining engineering fundamentals with focused security practice.
Ranked #88 worldwide on CyberTalents among 100,000+ hackers, I operate with one rule: document everything. That ethos produced 185+ technical write-ups across cybersecurity labs, CTF challenges, and hands-on security research.
“In theory, theory and practice are the same. In production, exploitation is the only proof of concept that matters.”
Chess-inspired logic and non-linear offensive maneuverings. Thinking multiple moves ahead to dismantle defenses through calculated execution.
CTF showdowns, red teaming. Testing perimeter resilience by thinking and striking like an attacker.
Binary reverse engineering, C/C++ memory teardowns, and custom offensive tool development. Building and dissecting complex systems.
The Reasoning Gap in Automated Vulnerability Detection: A Comprehensive Benchmark of LLMs, SAST, DAST, and Graph-Based Approaches
Investigating why automated analyzers and modern LLMs struggle with semantic vulnerability reasoning in C/C++ source code, establishing empirical detection benchmarks.
View on IEEE XploreCyberTalents Global Top 100
#88 / 100,000+
CyberTalents
Elite ranking among global cybersecurity professionals
Top 1 - fortinet attack and defence CTF
FIRST BLOOD
CTF Competition
Outstanding performance in advanced capture the flag
Top 7 - Dell hackathon (Hacktrick)
Finalist
National Competition
Engineered innovative offensive cybersecurity & AI projects evaluated by global engineering leaders.
ECPC Regional Champion
2022 Champion
Programming Contest
Algorithmic problem-solving mastery
2026
Cybersecurity Engineer — Fawry
[Active Role] GRC & Penetration Testing
2025–2026
Cybersecurity Diploma — Information Technology Institute (ITI)
B.Sc. in Computer Engineering — AAST (Graduated)