Experience — Abdellah BELOUALI

Resume created on DoYouBuzz

Experiences

Vulnerabilities scaning using tools such as: nmap, wp-scan, nessus, sqlmap, nikto, msfconsol, et bien d'autres outils
Port scanning TCP/UDP and detect OS versions and other running services
Scan for onains and subdomains that may be used or vhost, and hidden folders using tools such dirbuster, gobuster and other.
Pentesting web applications ( php, wordpress, falsk, CMS...)
Using Burpsuit for testing and intercepting webpages for analysis and for fuzzing
Deep seraching and looking for vulnerable versions and using exploits on exploit-db, github or other resources
Adapting python, bash, ruby, C, C++, ... or other scripts depending on target or OS to work our exploit.
Using OS as main pentesting tool and all the tools that comes with it Parrot/KaliLinux
Cracking and decrypting hashs that we may fing during tha assesment using tools hashcat / jhon
Using Hydra for brute forcing testing
Check for IAM SSO et Authentification Forte Pentesting LDAP using the appropriate tools like Crack Map Exec

Install and setup the application after getting the package from dev teams
Study required deployment environment and making a schema of every application and servers
Writing step by step installation guides and writing down the solutions found regarding every problem found in each step
Deploy applications mostly on Linux servers using different techs, scripting bash, python.
Configure files of each app before deployment
Testing and making sure that applications work properly from end to end, troubleshoot and correcting any problem found before delivering to the next phase teams.

DevOps Technologies :
Manage docker containers on AWS cloud using Ansible ( maintain, update, install,...)
L2/L3 incident management OS and applications
Linux/Windows Servers administration
Users and AD groups management ( Add, Supp, Mod....)
Databases servers administration DB MSSql, SQL
Manage and administration client's applications and websites Apache, Tomcat, IIS
Manage changes L2/L3:
Client's VMs administration on Vmware ESXi
Maintain security patches on client's VMs ( updates, OS, Windows, Linux )
Nessus Scans
Manage VMs resources ( add, update, LV, RAM, CPUs, )
Create and setup new VM to new clients
Scripting Shell, PowerShell, Python,

Auto formation in Ethical Hacking and Pentesting
Résolution des CTFs dans plusieurs plateformes et VM
Participating in CTF challanges on difffrent platforms ( HackTheBox, TryHackMe, VulnHub...)

Amplitude Banking Solutions Consulting
Integration and setup the working environments on unix, AIX, Windows
Prepare and setup application environments ( Tomcat, Apache, Oracle, .....) and make sure that all working properly as it should integrating with the core banking system
Setup and integration of different publishing tools with the core banking application Amplitude. locally or remotely, on the same servers or separate server.
Developing publishing banking slips using one of the tools proposed to client Opentext Streamserve or Sopra's tool.
Helping to setup and resolve most encountering problems on UNIX, AIX, and windows servers
Generating periodic reporting to the central banks using SQL Developper,DBeaver, , SQL )
Creating Procedure documents destinated to our clients in french or english

Servers administration (Windows, Redhat,Linux. . . )
Databases administration (Mysql, Oracle, Post-gresql...)
Webservices Administration (Tomcat, Apache,JBoss...)
Virtual infra administration using Vmware vSphere (Add and manage VMs ,migration and backup VM)
Daily followup Avamar et Net-backup backups
Infrastructure Monitoring (servers, routers,switchs...)
Manage and resolve Tickets respecting the SLAs

Supervision and network exploitation WAN (Routers, Gateways ,Firewalls,..). LAN/Voip (Switches, wifi, IPphones)
Tools : HP NNMi, Netcool, Cisco Prime, Putty.
Manage and create network and security tickets
Manage tickets , changes and cooperating with other network providers

Network and security equipment incident management ( Routers, Switches, Firewall ASA/Unix/Windows,Servers, IPS/IDS,) : Troubleshooting and incident analysis respecting SLAs.
Supervising and exploiting LAN/TOIp Networks ( Switches, Wifi Nodes, IP Phones) ,
WAN ( Routers, Firewalls, IDS/IPS)
Tools: HPOpenview, Spectrum, Alaloop, Nagios, BMC Remedy, Putty.
Piloting and coordinating with most network providers worldwide OBS, SFR, AT&T, T-Systems, Vodacom, Singtel…) in order to followup tickets and resolving the ongoing incidents
Changes management : Change and adapting routers and switches config to accomplish clints requests.
Update planned workout with providers

Abdellah BELOUALI