8000 LahsenAitOiahmane (l27sen) · GitHub
[go: up one dir, main page]
Skip to content
View LahsenAitOiahmane's full-sized avatar
189 followers · 3k following

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Highlights

  • Pro

Block or report LahsenAitOiahmane

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
LahsenAitOiahmane/README.md
l27sen, aka Lahsen, in binary with green glasses, flowing into 27. Cybersecurity engineering student focused on reverse engineering, binary analysis, and pentesting. Preparing for HTB CPTS and getting started in bug bounty. Interests include XOR and PRNG checks, heap exploitation, JWT algorithm confusion, insecure deserialization, and AI-assisted binary analysis.

Hack The Box ↗   ·   Root-Me ↗   ·   0xWriteups ↗

About / text version

Hey, I'm Lahsen, aka l27sen. I'm a cybersecurity engineering student focused on reverse engineering, binary analysis, and penetration testing. I'm preparing for HTB CPTS and getting started in bug bounty.

I like understanding what the binary actually does, writing a solver to prove it, and leaving a useful writeup behind. My idea of a hobby:

  • Reversing: untangling XOR loops, PRNG checks, and the occasional decoy flag.
  • Pwn: exploring heap use-after-free bugs and GOT overwrites in CTFs.
  • Web: exploring JWT algorithm confusion, insecure deserialization, and authentication logic in labs.
  • AI: building local LLM and RAG tools that help explain binary analysis.

Languages: Python, C, Bash, PowerShell; reading x86/x64 assembly.
Reverse engineering: GDB, radare2, Ghidra, IDA.
Pentesting: Burp Suite, Nmap, Metasploit, Sliver.

Hack The Box and Root-Me are where I practice. Follow the links for current progress. My notes live in 0xWriteups.

Every crash is a clue.

Pinned Loading

  1. Hexplain Hexplain Public

    Static analysis tool of PE/ELF/.NET executables, powered by large language models (LLM) and Retrieval-Augmented Generation (RAG). It transforms opaque binary content into plain-language cybersecuri…

    Python 4

  2. 0xWriteups 0xWriteups Public

    From enumeration to root: my personal archive of cracked boxes, captured flags, and custom-built challenges. The anatomy of a pwn: technical writeups for CTF challenges I've solved and designed. Fo…

    HTML 2

  3. CWE-502-300-scripts-samples-php-java-dotnet CWE-502-300-scripts-samples-php-java-dotnet Public

    This folder contains a benchmark dataset of source files in PHP, Java, and C# designed for testing SAST (Static Application Security Testing) tools against CWE-502 (Insecure Deserialization).

    C# 2

  4. AttackMe AttackMe Public

    Configure a number of vuln services on a kali machine and attack it from another machine with the same tool or (try it ur self good for trainning as a beginner)

    Shell 3

  5. vaultdex.web vaultdex.web Public

    An automated security auditing tool designed to detect vulnerabilities within the local storage of Android applications (APKs)

    Python 1

  6. TrapAndBlock TrapAndBlock Public

    This project builds a network security lab using iptables to test firewall behavior. It simulates an attacker, a victim server, and a logging system, aiming to create a honeypot-style firewall that…

    Shell 1

< 2C01 /div>
0