Mohamed BERKAT
Cybersecurity & Cyberdefense
Third-year cybersecurity student specializing in red teaming, forensics, and penetration testing, with a background in defensive security.
Contact MeAbout Me
October , 2002
Passionate cybersecurity student specializing in penetration testing, vulnerability analysis, and malware analysis. Skilled in both offensive and defensive security tools, with a strong foundation in security concepts. Currently focused on building expertise in penetration testing, vulnerability exploitation and trying to learn devsecops foundations to enhance overall security posture.
experience
languages
Skills
A brief overviewPenetration Testing
Burp Suite
Metasploit Framework
Wireshark
ZAP, Hydra, John the Ripper
Nmap/Nikto
General Skills
Web Penetration Testing
Mobile Penetration Testing (Android)
Network Enumeration
Vulnerability Assessment
Reverse Engineering (Basic Knowledge)
Security Management
Frameworks & Standards: NIST, ISO 27001
Basic Knowledge in Security Audits
Programming Languages
Python (Scripting & Exploit Development)
Bash (Automation)
Assembly (x86)
C/C++ (Exploit Development)
JavaScript
Systems & Environments
Operating Systems: Linux (Kali/ParrotOS), Windows Server, Active Directory
Virtualization: VMware, VirtualBox
Networks & Protocols
TCP/IP, HTTP/S, FTP, SSH
Network Protocol Analysis
Experience
Professional journeyCycle d’Ingénieur en Sécurité des Systèmes d’Information et Cyberdéfense
Ecole de science de l’information (ESI), Rabat, MarocClasses préparatoires en mathématique et physique MPSI/MP
CPGE Omar Ibn Abdelaziz, Oujda, MarocN1 SOC Analyst Intern
LMPS GROUP, Casablanca, MarocFull Stack Dev Intern
AdelphaTech SERVICES, Rabat, MarocProjects
Most recent work
Design and Implementation of a SIEM Based on ELK Stack and Wazuh for Cyber Threat Management
Simulation of realistic scenarios for data collection, incident analysis, and threat response. | 2024, July
Read
Web Application Pentesting
Testing vulnerable web applications (DVWA, BWAPP, and Juice Shop), exploiting vulnerabilities such as SQL Injection, XSS, and CSRF, with the creation of detailed reports.
Read
Android Application Pentesting
Setting up an Android test environment with Genymotion, Drozer, and Jadx to analyze and exploit vulnerabilities in applications, while drafting reports on these vulnerabilities and securing steps.
Read
Static and Dynamic Analysis of the Zeus Trojan (Malware Analysis)
Detailed analysis of the functioning of the Zeus Trojan, including its network behavior and evasion techniques.
Read
Shellcode Development for Exploitation
Creating shellcodes to inject malicious code into remote processes by exploiting vulnerabilities.
Read
Deployment of a NIDS (Network Intrusion Detection System) with Suricata
Enhancing security and detecting potential threats in the network environment.
Read