I'm a Cybersecurity Bachelor's Student at Princess Sumaya University for Technology (PSUT) and an active CTF Player & Competitor.

In the CTF and security research world, my core specialization is OSINT with DFIR (Digital Forensics & Incident Response) — solving challenges where open-source reconnaissance directly intersects with deep digital forensics. Rather than treating them as separate fields, I integrate open-source intelligence gathering with forensic artifact analysis: digging into Git plumbing and commit logs, carving deleted files from web snapshots, extracting GPS EXIF metadata, and tracking threat actor campaign infrastructures.

Event: Cryptix CTF — Organized by HTU Cyber Club in collaboration with CYS-TECH
Category / Track: OSINT with DFIR (Digital Forensics & Incident Response)
Status: 5 / 5 Challenges Solved (100% Clear)

A complete, production-grade repository documenting step-by-step methodologies, reproducible CLI pipelines, custom extraction scripts, visual flowcharts, and primary disclosures for the complete OSINT with DFIR track:

A secure web platform architected with strict defensive programming principles:

• Privilege Separation: Multi-tier authentication distinguishing Customer, Administrator, and Root roles.
• Access Control & Lifecycle: Role-Based Access Control (RBAC), reauthentication for sensitive actions, account state enforcement (Active, Banned, Frozen).
• Database Hardening: PDO prepared statements, parameterized queries preventing SQL injection, transaction handling with row-level locks (FOR UPDATE).
• Cryptographic Best Practices: Modern password hashing via password_hash() (Argon2/bcrypt) and safe session token lifecycles.

A Python security tool automating the parsing and triage of server log files for suspicious intrusion activity:

• Detection Capabilities: Identifies brute-force authentication spikes, known attack patterns, and Indicators of Compromise (IOCs).
• SIEM Principles: Implements rule-based parsing and alerting aligned with Blue Team security operations workflows.

A standalone credential vault implemented in Python with local cryptographic protection and safe memory/file handling.

• OSINT & Footprinting: Deep open-source searching, username pivoting, public repository audits, GitHub Gist tracking, domain/IP intelligence.
• Digital & Web Forensics: Web archive timeline analysis, EXIF metadata extraction, coordinate trigonometry, HTTP payload recovery.
• Git Plumbing Forensics: Detached ref exploration, git notes namespaces, unreachable & dangling commit carving (git fsck), commit patch diff auditing.
• Applied Cryptography: Multi-stage OpenSSL pipelines (PBKDF2, AES-256-CBC, HMAC, SHA-256), Base64 block alignment, encoded payload reverse engineering.
• Cyber Threat Intelligence (CTI): Threat group profiling (Lazarus Group / APT38, cybercrime forums like Darkode), judicial docket tracking (DOJ, CourtListener), IOC correlation.

• CCT Trained: Certified Cybersecurity Technician (EC-Council)
• TryHackMe: Completed SOC Level 1 Path (Security Monitoring, Event Analysis, Threat Detection, Network Defense)
• Academic: Cybersecurity Bachelor's Program at Princess Sumaya University for Technology (PSUT)

I'm actively participating in CTF competitions, security challenges, and seeking collaborative opportunities in:

CTF Teams & Competitions | Digital Forensics & Incident Response (DFIR) | Threat Intelligence & Hunting | SOC / Blue Team Analysis | Security Engineering

• LinkedIn: linkedin.com/in/adnan-al-hmoud
• GitHub: @Dabuynyx