> For the complete documentation index, see [llms.txt](https://canitey.gitbook.io/canitey/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://canitey.gitbook.io/canitey/index/whoami.md).

# whoami

Hello there my name is Mohammed Ahmed (CANITEY), I'm a noob bughunter, and a programmer.

### Skills under my belt

* Web applications penetration testing
* Android application penetration testing
* HTML/CSS, JS, PHP, Go, Python programming, and welling to learn whatever interesting language gets on the radar XD

### In progress

* Network penetration testing
* Active directory testing

## Highlights

{% content-ref url="/pages/6NaebUzx8QDUfTOHqvlP" %}
[CVE-2025-4957 Walkthrough](/canitey/cve-walktroughs-exploits/cve-2025-4957-walkthrough.md)
{% endcontent-ref %}

## Experiences

* Bughunter, found several bug can find some of them written [here](https://canitey.medium.com)
  * [UUID based IDOR leaking PIIs](https://canitey.medium.com/idor-uuids-to-leak-pii-7675130ab784)
  * [CSRF and Broken business logic lead to taking down whole organization](https://canitey.medium.com/one-click-to-collapse-chaining-logic-flaw-csrf-to-take-down-a-saas-organization-7d58736fc6f9)
  * [Forced Browsing lead to mass PII leakage](https://canitey.medium.com/one-click-to-collapse-chaining-logic-flaw-csrf-to-take-down-a-saas-organization-7d58736fc6f9)

## CVEs (by me)

* [CVE-2025-4957](https://www.cve.org/CVERecord?id=CVE-2025-4957), [Technical walkthrough](/canitey/cve-walktroughs-exploits/cve-2025-4957-walkthrough.md)

## Projects

* [Wrote Exploits/Walkthroughs for CVEs](https://github.com/CANITEY/CVEs-and-Exploits)
  *  [CVE-2025-6977 - Profilegrid Reflected XSS walktrough](https://github.com/CANITEY/CVEs-and-Exploits/tree/main/CVE-2025-6977-POC)

## Contact me @

* [Facebook](https://web.facebook.com/mohamed.med01345/)
* [Linkedin](https://www.linkedin.com/in/mohammed-ahmed-%F0%9F%87%B5%F0%9F%87%B8-919705187)
* [Medium](https://medium.com/@CANITEY), I publish bug bounty writeups here ;)