Skip to content
View or0to's full-sized avatar
6 followers · 0 following

Block or report or0to

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
or0to/README.md

Typing SVG



8+ years experience Focus areas Location Status



LinkedIn Alphacode Email X YouTube


👨‍💻 About Me

role:        Founder & CEO @ Alphacode
specialty:   Web / API / Cloud Penetration Testing
experience:  8+ years in offensive security
achievements: Hall of Fame across multiple bug bounty platforms
mission:     Find real vulnerabilities before attackers do — no checkbox audits

I'm Ali Essam, a cybersecurity professional with 8+ years of hands-on experience finding and closing security gaps in web applications, APIs, and cloud infrastructure.

I'm the Founder & CEO of Alphacode, where I lead penetration testing, vulnerability research, and red-team engagements for organizations that need real, evidence-based security work. My reports have earned Hall of Fame recognition on multiple bug bounty platforms.

I split my time between offensive security engagements, building open-source security tooling, and mentoring newer researchers through my bug bounty roadmap.


🎯 What I Do

🕵️ Penetration Testing

  • Web & API security — deep assessments surfacing SQLi, XSS, CSRF, RCE, SSRF, IDOR, and more
  • Cloud security — auditing AWS and Azure for misconfigurations and exposure
  • Red teaming — simulating real attacker behavior to test detection and response

🏹 Bug Bounty Hunting

  • Active researcher on HackerOne, Bugcrowd, and private programs
  • Multiple Hall of Fame placements for responsible disclosure
  • Focus on original exploitation methodology over scanner defaults

🛠️ Research & Tooling

  • Building and maintaining open-source security tools
  • WAF bypass research and detection-evasion techniques
  • Recon & vulnerability discovery automation in Python

🚀 Featured Projects

Alphacode Egyscan

Misr Dons

metax Roadmap

Project Description
🤖 Alphacode Terminal-native AI coding agent — multi-model orchestration, parallel agent swarms, 40+ tools
🔎 Egyscan A web vulnerability scanner built to find critical issues across web applications quickly and reliably
🛡️ Misr Vulnerability scanner covering SQLi, XSS, RCE, LFI, and SSRF, with subdomain enumeration and secrets detection
🔑 Dons CLI tool that scans JavaScript files for exposed API keys, credentials, and secrets
⚡ metax An advanced XSS vulnerability detector
🗺️ Roadmap A structured guide for people starting out in bug bounty hunting — methodology, mindset, resources

🏆 Certifications

Certification Issued
🎓 AWS Certified Security – Specialty Sep 2023
🎓 Google Cybersecurity Professional Certificate Feb 2024
🎓 Certified Cloud Security Professional (INE) Oct 2024
🎓 eLearnSecurity Web Application Penetration Tester eXtreme (eWPTXv2) Jun 2024
🎓 Certified Threat Hunting Professional Jul 2024
🎓 Certified Digital Forensics Professional Jun 2024
🎓 Certified Incident Responder May 2024
🎓 Certified OPSWAT Cybersecurity Professional Apr 2024
🎓 Certified OPSWAT WebApp Exploitation Expert May 2024
🎓 Certified Cybersecurity Analyst Jul 2023
🎓 eLearnSecurity Junior Penetration Tester (eJPT) Jun 2024
🎓 Certified OWASP API Security Top 10 Jul 2024

🧰 Skills & Tools

Penetration Testing
Web Apps APIs Cloud Network

Bug Bounty Platforms
HackerOne Bugcrowd Cobalt

Exploitation & Analysis Tools
Burp Suite Metasploit Wireshark Nmap OWASP ZAP

Programming & Scripting
Python PHP JavaScript SQL

Cloud Security
AWS Azure

Vulnerability Management
Nessus Qualys OpenVAS

📊 GitHub Analytics

Ali Essam's GitHub stats Ali Essam's GitHub streak
Top languages



Contribution graph

📫 Let's Connect
🤖 Alphacode alphacli.github.io
📩 Email tlbbeg313@gmail.com
🔗 LinkedIn linkedin.com/in/dragonked2
🐙 GitHub github.com/dragonked2
🐦 X (Twitter) @3lyy313
📺 YouTube @3ly313

📜 License

All code and documentation in my repositories are released under the MIT License unless otherwise noted.


"Stay curious, stay secure, and always be one step ahead of the threat."


Thanks for stopping by. Always open to collaborating on security research, bug bounty work, or open-source tooling. 🚀


Popular repositories Loading

  1. or0to or0to Public

    Cyber Security Leader & Penetration Tester I bridge the gap between deep technical exploitation and executive-level security strategy. As CEO of DragonMeta and a Senior Penetration Tester for the E…

    1

  2. or0to.github.io or0to.github.io Public

    Cybersecurity Expert · Penetration Tester · Bug Bounty Hunter Founder & CEO of DragonMeta. 8+ years hunting vulnerabilities across web, API, cloud, and mobile environments. 500+ security flaws repo…

    HTML 1

  3. alphacode alphacode Public

    Forked from dragonked2/alphacode

    Free MIT AI coding agent — no API key needed. Built-in free model, or bring Claude, GPT, Gemini, DeepSeek, Ollama +50 more. Swarm mode, 40+ tools, browser & desktop automation, built in Rust.

    Rust 1