Sayed Salah Elshafey

Penetration Tester & Security Researcher

I test applications, systems, and networks, research vulnerabilities, build security tools, and share what I learn.

Scroll to explore
02Career timeline

Experience

  1. — Present

    Injaz Tech

    Current

    QC & Penetration Tester

    Cairo, Egypt — Hybrid

    I work on quality assurance and security testing for geospatial and remote-sensing applications, combining Playwright automation, manual testing, and penetration testing. My work covers satellite imagery, drone-related workflows, and GeoServer integrations, with defects and findings documented through Jira.

  2. —

    RootX / Part-time

    Security Researcher

    Cairo, Egypt — Remote

    Researched application vulnerabilities through hands-on security testing and bug-hunting activities, investigating potential weaknesses and exploitation scenarios.

  3. —

    ITSOLERA PVT LTD / Internship

    Red Team Intern

    Remote

    Participated in penetration testing, vulnerability assessment, and collaborative security tool development, contributing to the VulnCraft and RedScout projects.

Certifications

Credentials & training

Skip to Projects
INE Security certificate for Web Application Penetration Tester eXtreme

eWPTXv3

INE Security

INE Security certificate for Mobile Application Penetration Tester

eMAPTv2

INE Security

Udemy certificate for Android App Hacking — Black Belt Edition

Android App Hacking — Black Belt Edition

Udemy

FahemSec certificate for Secure Code Review 101

Secure Code Review 101

FahemSec

Hack The Box Academy learning path completion for Web Penetration Tester Path

Web Penetration Tester Path

Hack The Box Academy

TryHackMe certificate of completion for the Jr Penetration Tester Learning Path

Jr Penetration Tester Learning Path

TryHackMe

ITI Mahara-Tech certificate of completion for Cybersecurity for Beginners

Cybersecurity for Beginners

Information Technology Institute (ITI) · Mahara-Tech

IT Gate Academy certificate of participation for completing the Academic Cyber Security Penetration Testing Engineering Program

Academic Penetration Testing Engineering Program

IT Gate Academy

04Case studies

Projects

What I built, how it works, and where I contributed.

Security tooling

VulnCraft

Educational Payload Generator

Co-developed a Python CLI that generates educational templates for common web vulnerability classes.

  • Python
  • CLI

Reconnaissance

RedScout

Modular Reconnaissance Framework

Co-developed a modular framework that brings active and passive reconnaissance into one workflow.

  • Security tooling
  • Reconnaissance

Applied cryptographyApril–May 2025

Cryptographic Systems

AES, DES & RSA Implementations

Implemented and studied AES, DES, and RSA in Java, with an emphasis on algorithm internals and correctness.

  • Java
  • AES
  • DES
  • RSA
View project index
05Behind the work

More than tools. It's about how I think

I'm interested in the gap between what an application is designed to do and what it actually allows.

That curiosity shapes how I approach security testing and technical problem-solving. I also enjoy turning practical lessons into cybersecurity writeups and educational content.

Cairo University

Faculty of Computers and Artificial Intelligence

Cybersecurity — Expected 2027