👋 Hey there, I'm Youssef Halawany

🔐 Security Researcher | 🛠 Backend Developer

const youssef = { location: "Mansoura, Egypt 🇪🇬", role: "Independent Security Researcher", education: "B.Sc. Computer Engineering — Cybersecurity", university: "New Mansoura University", currentFocus: [ "Web Application Security Research", "Bug Bounty Hunting", "Backend Development" ], passions: [ "Finding & Reporting Vulnerabilities 🔐", "Building Secure Backend Systems 🛠" ], motto: "Security is not a product, but a process!" };

• 🔭 Independent security researcher on HackerOne & bug bounty platforms
• 🐛 Discovered access-control, authentication bypass, and business-logic vulnerabilities in production web apps
• 🛠 Building backend systems with Node.js, Express.js, PostgreSQL & Redis
• 🌱 Continuously sharpening offensive security skills through real-world targets
• 🎯 Goal: Become a full-time offensive security professional

• Access-Control Bypass — Found a flaw allowing folder "Editor" collaborators to permanently delete the owner's files, silently bypassing the 30-day trash recovery mechanism.
• Token Leakage → Comment Injection — Discovered that anonymous preview bearer tokens could be used to read private comment threads and inject unauthorized comments with @mention notifications.
• Download Restriction Bypass — Identified a logic flaw in "view-only" shared links enabling any anonymous holder to retrieve the complete original file via the preview component.

Node.js · Express.js · PostgreSQL · Redis

Designed and developed the backend architecture for a multi-agent AI recruitment platform (graduation project). Implemented robust data handling with PostgreSQL, task queueing with BullMQ & Redis, and collaborated with a team integrating a React frontend and Python gateway API.