ALI MRAD

Cybersecurity Researcher & Full Stack Web Developer

View Projects Hire Me

Scroll Down

root@alimrad:~$ whoami

About Me

I’m Ali Mrad (Alimrad), a Cybersecurity Researcher and Full Stack Web Developer with a dual focus on securing and building modern web applications. My work sits at the intersection of offensive security and full-stack engineering, allowing me to identify vulnerabilities not just from the outside—but from deep within application logic, architecture, and code.

I specialize in Web Application Security, Offensive Security, and Red Teaming, with hands-on experience uncovering real-world vulnerabilities such as SQL injection, XSS, IDOR, authentication flaws, and misconfigurations. My approach combines practical exploitation techniques with a strong development mindset to help teams design applications that are fast, scalable, and secure by default.

On the development side, I build clean, responsive, and robust web solutions—from frontend interfaces to backend systems and API integrations—applying secure coding principles at every layer.

5+ Bugs Found

7+ Projects

9+ Certificates

root@alimrad:~$ cat skills.txt

🛡️ Cybersecurity Skills

🔍

Nmap

🕷️

Burp Suite

🔎

OSINT

🎯

Recon

⚡

XSS

💉

SQL Injection

🔐

Web Security

🐧

Linux

💣

Metasploit

🦈

Wireshark

💻 Web Development Skills

🌐

HTML5

🎨

CSS3

⚡

JavaScript

🟢

Node.js

🐘

PHP

🗄️

MySQL

📦

Git

🔌

REST API

root@alimrad:~$ ls projects/

Beirut Thread

Active

I’m currently developing a E-Commerce store.

Web

Coming Soon →

CIS College

Active

I’m currently developing an advanced agenda and management system for CIS College, including all essential sections and features students may need to access quickly and easily.

Web Security

Coming Soon →

WhatTheBooklb

Completed

I built WhatTheBookLB.com with an advanced system and a full admin dashboard to track products, orders, and analytics. The project was delivered successfully.

Web Security

Visit Website →

CIS CTF

Completed

Built a CTF website designed specifically for absolute beginners to learn cybersecurity in a simple and fun way.

Web CTF

Visit Website →

Life Of Hacker

Completed

I'm running a website that covers the most well-known issues in cybersecurity. What makes it stand out is its simplicity — the content is clear, accessible, and far less complicated than what you'd find on most other platforms.

Web Security

Visit Website →

First Modern Company [FMC]

Completed

Created a website for an FMC company: Globally connected, locally invested. The site was thoroughly professional, featuring a dashboard for specialized management within the global company.

Web WordPress

Visit Website →

CyberStore

Completed

Created a basic Telegram bot to help people get free views, likes, and shares on TikTok, but they need to invite others or watch ads to earn the reward.

Telegram Marketing JavaScript

Coming Soon →

root@alimrad:~$ cat bug_reports.log

security_logs.txt

Target	Vulnerability	Severity	Description
LaterHayder	IDOR	Critical	IDOR vulnerability on LaterHayder that allowed unauthorized manipulation of user identifiers, resulting in the ability to generate unlimited in-platform coins. Because the platform required real money to transfer tokens to an account, this vulnerability had direct financial impact and could enable account monetization if abused.
Confidential Client	BAC	Critical	Broken Access Control (Unauthorized Access to Admin Logs & Transfers)
LaterHayder	IDOR	High	IDOR vulnerability on LaterHayder that allowed privilege escalation by manipulating object identifiers. This issue enabled unauthorized access to all platform levels and restricted channels without completing the required progression steps or spending real money.
Discord	IDOR	High	IDOR vulnerability on Discord that allowed generating unlimited Nitro gifts due to improper access control
Multiverselb	IDOR	Medium	IDOR vulnerability on MultiverseLB that exposed all hidden products and upcoming releases due to improper access control
Faraday	Information Disclosure	Medium	Identified an information disclosure vulnerability that exposed sensitive data due to misconfigured permissions or improper access controls, potentially leading to data leaks and unauthorized access.