whoami

Hello there my name is Mohammed Ahmed (CANITEY), I'm a noob bughunter, and a programmer.

Skills under my belt

• Web applications penetration testing

• Android application penetration testing

• HTML/CSS, JS, PHP, Go, Python programming, and welling to learn whatever interesting language gets on the radar XD

In progress

• Network penetration testing

• Active directory testing

Experiences

• Bughunter, found several bug can find some of them written here

  • UUID based IDOR leaking PIIs

  • CSRF and Broken business logic lead to taking down whole organization

  • Forced Browsing lead to mass PII leakage

CVEs (by me)

• CVE-2025-4957, Technical walkthrough

Projects

• Wrote Exploits/Walkthroughs for CVEs

  • CVE-2025-6977 - Profilegrid Reflected XSS walktrough

Contact me @

• Facebook

• Linkedin

• Medium, I publish bug bounty writeups here ;)