Hesham Mahmoud

Hesham Mahmoud Aka 0xRyuzak1 — an offensive security engineer who breaks into things for a living: red team operations, penetration testing, and adversary simulation against hardened environments. My focus is the full attack chain — initial access, web application exploitation, AI security, Active Directory exploitation, EDR/AV evasion — and the custom C/C++ and Python tooling that makes it all work quietly.

Beyond engagements I hunt bugs and research where defenses fall short — credited in several CVEs and Oracle's Critical Patch Update. I contribute to open-source security tooling and write up technique and methodology so others learn the how, not just the what.