Mohamed Basset
Founder & Chief Hacking Officer at Seekurity SA de C.V.
Mexico City
Summary
🤩
Rockstar🎓
Top SchoolMohamed Basset is a founder and hands-on Chief Hacking Officer with 11 years of experience in application, mobile, desktop and physical security, leading penetration testing and automation efforts from Mexico City. He founded Seekurity to deliver comprehensive red/blue team engagements, source-code audits and bespoke security automation, while also leading OWASP’s QRLJacking project that exposed QR-login hijacking risks across major platforms. A prolific bug bounty hunter and former full-time vulnerabilities researcher, he has responsibly reported issues in many top-tier companies including Facebook, Google, Twitter and major security vendors. His background as a developer—early work writing malware and remote admin tools for research—gives him unique offensive insight that informs practical defenses. He’s building two large security automation/OSINT projects intended to integrate into SDLCs and streamline continuous security testing.
11 years of coding experience
4 years of employment as a software developer
Bechlor of Toursim and Hotels, Tourism and Travel Services Management, G+, Bechlor of Toursim and Hotels, Tourism and Travel Services Management, G+ at Faculty of Tourism and Hotels, Minia UniversityTechnology Entrepreneurship, Technology Entrepreneurship at Stanford University
Arabic, English, Spanish
Github Skills (6)
html10
it-security10
phishing10
php10
javascript10
security10
Programming languages (14)
Github contributions (5)
OWASP/QRLJacking
Jul 2016 - Nov 2020
QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
Role in this project:
Security Engineer
Security EngineerContributions:94 commits, 7 PRs, 126 pushes in 4 years 4 months
Contributions summary:Mohamed primarily contributed to a JavaScript-based module designed for WhatsApp QR code hijacking, modifying and enhancing the functionality of the `WhatsAppQRJackingModule.js` script. The updates include modifications to the URL used in the XHR request and improvements to ensure the QR code is always active. Furthermore, the user also updated a phishing HTML file, and various PHP files, likely related to the framework's core functionality, including the QR code handling and storing processes, demonstrating a focus on exploitation techniques.
response-codeqrcodesecuresecuritycode-login
SymbianSyMoh/P4wnP1-ALOA-Payloads
Jun 2019 - Dec 2019
This repo is dedicated to P4wnP1 A.L.O.A by @MaMe82 Payloads
Contributions:6 commits, 5 pushes, 1 branch in 6 months
raspberry-pipayloaddedicatedshodanpayloads
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.