whoami
Alazhar Alabri @azarx39
Security analyst, bug bounty hunter and developer. I monitor and hunt threats by day, break web apps for fun, and build products like this website.
🛡️ SOC Analyst L1🐞 Bug Bounty Hunter🚩 CTF Player💻 Web & Mobile Developer
Current work // now
SOC Analyst — Level 1 ACTIVE
- Monitoring and analysing security events in the SIEM.
- Building correlation rules, watchlists and lookup tables to improve detection.
- Adversary simulations and incident reports.
- Vulnerability management and scanning.
- EDR monitoring and firewall policy & traffic management for clients.
Free time // after hours
Bug bounty
Hunting on HackerOne and other platforms since 2023 — SQLi, XSS, SSRF, IDOR, misconfigurations and information disclosure, with manual testing and clear remediation.
Capture the Flag
Sharpening offensive skills with CTFs and labs on Hack The Box, PortSwigger Web Security Academy and TryHackMe.
Web & mobile development
Designing and building secure web and mobile apps — including this Alif Yaa website, its dashboard and student & parent portal.
LaravelPHPPythonFlaskTailwindDocker
Project // side work
QuickVuln — AI-integrated web security scanner
- Combines Subfinder, Wayback Machine and XSStrike for subdomain enumeration, parameter discovery and scanning.
- Uses AI to build payload wordlists for the target's technology stack.
- Generates vulnerability reports with remediation suggestions.
Toolbox // skills
Burp Suite
Kali Linux
Metasploit
OWASP ZAP
Wireshark
SIEM
EDR
Vulnerability scanning
Python
Bash
Linux
Incident response
Log analysis