About

I'm Ahmed Ismail — a Senior Offensive Security Engineer with around eight years across penetration testing, red teaming, vulnerability research, and bug bounty hunting. I spend most of my time breaking web applications and Active Directory environments, and increasingly on the security of AI systems.

This site is my working journal: machine writeups, the certs I've earned and what I think of them, CVEs I've disclosed, original research, and the roadmaps I wish I'd had when I started.

Find me on