Alvin Mwambi (@Steiner254)

# <Who Am I?/>

I am Alvin Mwambi (@Steiner254)

I am a professional with expertise in Web Application Security, Mobile Security, Network Security, Cloud Security, Web Development, Penetration Testing, Source Code Reviewing, and Technical Writing. I also specialize in Smart Contract Development, Auditing, and DevSecOps. As a proactive Application Security Researcher, I safeguard companies from cyber threats by identifying and resolving vulnerabilities.

# <Work & Experience/>

SwyptIO

Blockchain/Web2 DevSecOps

Hindsight VIP

Blockchain Security Auditor

Varonis Systems

Cybersecurity Engineer | Technical Writer

Digital Jewels Limited

Cybersecurity Auditor & Penetration Tester

Finhazi - Simplifying Finance

Penetration Tester

Dairah Tech Solutions

Penetration Tester

XYSecLabs

Chief Security Officer (CSO) | Penetration Tester | Smart Contract Auditor

# <Bug Bounty Achievements & Recognitions/>

United Nations (UN)

Reference

Huawei

Reference

The University of Texas

Reference

Utrecht University

Reference

Juspay – Mobile Banking

Reference

Sendy

Reference

Cision

Reference

Xsolla (2022)

Reference

Spectrocloud

Reference

Eset

Reference

Prinses Máxima Centrum

Reference

Bright Data

Reference

StarLeaf

Reference

Upstox

Reference

Helcim

Reference

Agicap

Reference

Rocketlane

Reference

# <Certifications & Accomplishments/>

WordSkills Kenya National Competition & Innovation 2024

(1st Position – Cyber Security)

Reference

Nafasi Connection - Live Hacking Competition

(1st Position, 16th August 2024 – Meetamore)

Reference

Africahackon Masterclass Trainer

(2023)

Reference

Safaricom/SheHacks KE Hackfest Speaker

(2023 – Blockchain Security)

Reference

CyberTalents Certified Threat Hunter

Reference

CyberTalents Certified SOC Analyst

Reference

PentesterLab Badges

Reference

Currently Studying CEH – Certified Ethical Hacker

Reference

Currently Studying BSCP – Burp Suite Certified Practitioner

Reference

Currently Studying AWS re/Start – Ajira Digital Bootcamp

Reference

Currently Studying Cyfrin Updraft – Full Blockchain Security Course

Reference

# <Skills & Tools/>

Cybersecurity: Web App Security, Mobile Security, Network Security, Cloud Security, Penetration Testing, Source Code Reviewing, Technical Writing

Programming: HTML5, CSS, JavaScript, C, C++, PHP, Java, Python, Bash, Go, SQL, Solidity, Rust, Ruby, Visual Basic

Frameworks: Laravel, Ruby on Rails, Django, Flask, Express.js, React.js, Angular

Databases: Relational, Object-oriented, Hierarchical, Network

Server Technologies: Web, Proxy, FTP, Application, File, Database, Mail Servers, Virtual Machines

Blockchain/Web3: Ethereum, Binance, AWS/Azure Nodes, Filecoin, Swarm, Chainlink, OpenZeppelin

Operating Systems: Windows, Linux (Kali, Parrot, Ubuntu, Linux Mint, Black Arch)

Additional: Hardware troubleshooting, Installation & Maintenance, MS Office Suite

# <My Blog/>

$$$ bounty in less 3 minutes from a google dork

Google Dorking - A powerful technique for quickly discovering vulnerabilities using advanced search queries. Bug Bounty Hunters ...

HTTP Request Smuggling/HTTP Desync Attacks (language of the gods)

HTTP Request Smuggling is one of the advanced topics in web security that needs deep understanding on how...

Insecure Direct Object References (IDOR)

Insecure Direct Object References (or IDOR) is a simple bug that packs a punch...

Directory/Path Traversal

Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on the server that is...

OS Command Injection

OS command injection (also known as shell injection) is a web security vulnerability that allows an attacker to execute...

CyberTalents BootCamp 2022 #Competition

Special kind of cybersecurity competition designed to challenge its participants to solve computer...

# <Who Am I?/>

I am Alvin Mwambi (@Steiner254)

# <Work & Experience/>

SwyptIO

Hindsight VIP

Varonis Systems

Digital Jewels Limited

Finhazi - Simplifying Finance

Dairah Tech Solutions

XYSecLabs

# <Bug Bounty Achievements & Recognitions/>

# <Certifications & Accomplishments/>

# <Skills & Tools/>

# <My Blog/>

$$$ bounty in less 3 minutes from a google dork

HTTP Request Smuggling/HTTP Desync Attacks (language of the gods)

Insecure Direct Object References (IDOR)

Directory/Path Traversal

OS Command Injection

CyberTalents BootCamp 2022 #Competition

# <Contact Me/>

Let's talk about cybersecurity & blockchain innovation!