DEV Community

Mohamed AboElKheir profile picture

Mohamed AboElKheir

Helping teams build secure software

Joined Joined on  Personal website https://www.linkedin.com/in/mohamed-aboelkheir-4802ba9b/ github website
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
mohamed_aboelkheir profile

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

#security #appsec #codereview #cybersecurity
Comments 2
11 min read

Want to connect with Mohamed AboElKheir?

Create an account to connect with Mohamed AboElKheir. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
mohamed_aboelkheir profile

Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)

#security #appsec #codereview #cybersecurity
Comments
10 min read
Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
mohamed_aboelkheir profile

Introducing the Secure Code Review Challenge (Practice Real-World Reviews)

#security #codereview #appsec #cybersecurity
Comments
4 min read
Clinejection: One Misconfigured GitHub Action Can Compromise Your App (Deep Dive & Lessons Learned)
mohamed_aboelkheir profile

Clinejection: One Misconfigured GitHub Action Can Compromise Your App (Deep Dive & Lessons Learned)

#ai #appsec #cybersecurity #security
Comments
9 min read
Let "Claude Code" Do Your Pentesting!
mohamed_aboelkheir profile

Let "Claude Code" Do Your Pentesting!

#appsec #ai #cybersecurity #claude
Comments
7 min read
GitHub RCE (CVE-2026-3854) - Deep Dive & Lessons Learned
mohamed_aboelkheir profile

GitHub RCE (CVE-2026-3854) - Deep Dive & Lessons Learned

#appsec #security #cybersecurity #design
1
Comments
8 min read
AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology
mohamed_aboelkheir profile

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

#appsec #security #ai #cybersecurity
Comments
9 min read
What AppSec Engineers Actually Do (and Why It Matters)
mohamed_aboelkheir profile

What AppSec Engineers Actually Do (and Why It Matters)

#appsec #cybersecurity #security #design
Comments
7 min read
How Reachability Analysis 🔎 can help with open source vulnerabilities mess (Coana as an example)
mohamed_aboelkheir profile

How Reachability Analysis 🔎 can help with open source vulnerabilities mess (Coana as an example)

#appsec #security #cybersecurity #design
Comments
10 min read
Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)
mohamed_aboelkheir profile

Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)

#appsec #security #cybersecurity #design
Comments
5 min read
Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)
mohamed_aboelkheir profile

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

#appsec #security #cybersecurity #design
1
Comments
7 min read
Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)
mohamed_aboelkheir profile

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

#appsec #security #cybersecurity #design
Comments
4 min read
Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)
mohamed_aboelkheir profile

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

#security #cybersecurity #design #appsec
Comments
4 min read
How to make “Input validation” easy for your devs
mohamed_aboelkheir profile

How to make “Input validation” easy for your devs

#security #express #cybersecurity #node
1
Comments
5 min read
loading...