https://alsolaiman.com/ar/Recent content in Home on AlsolaimanHugo -- gohugo.ioar© 2026 عبدالله السليمانMon, 13 Jul 2026 13:56:55 +0800https://alsolaiman.com/ar/articles/philosophy-of-watcher/Tue, 08 Jul 2025 00:00:00 +0000https://alsolaiman.com/ar/articles/philosophy-of-watcher/كيف نضبط ذواتنا؟ وكيف نحول بيننا وبين المعصية؟ وكيف نحاولُ.. أو نموتَ، فنُعذرا.https://alsolaiman.com/ar/articles/did-we-succeed/Sun, 05 Nov 2023 00:00:00 +0000https://alsolaiman.com/ar/articles/did-we-succeed/هل نجحنا في كسر سطوة الحداثة؟https://alsolaiman.com/ar/blogs/xss-as-a-password-stealer-a-very-overlooked-xss-attack-vector-56bd42cbf071/Sun, 12 Jul 2026 00:00:00 +0000https://alsolaiman.com/ar/blogs/xss-as-a-password-stealer-a-very-overlooked-xss-attack-vector-56bd42cbf071/Hi everyone, it’s been a while since my last article in 2022: A Deep dive into src=”” attribute leading to a Stored XSS . I have been busy, very. well, this time I come to you with an article after what? 4 years? not to…https://alsolaiman.com/ar/thankyou/Mon, 13 Jun 2022 20:55:37 +0100https://alsolaiman.com/ar/thankyou/<p>شكرا لكم! <a href="https://alsolaiman.com/ar/" >Back to Home</a></p>https://alsolaiman.com/ar/whoami/Mon, 13 Jun 2022 20:55:37 +0100https://alsolaiman.com/ar/whoami/<p class="lead"> Principal Product Security Engineer focused on offensive security, secure engineering, and building security programs that scale. </p> <ol class="border-s-2 border-primary-500 dark:border-primary-300 list-none"> <li> <div class="flex"> <div class="bg-primary-500 dark:bg-primary-300 text-neutral-50 dark:text-neutral-700 min-w-[30px] h-8 text-2xl flex items-center justify-center rounded-full ltr:-ml-12 rtl:-mr-[79px] mt-5"> </div> <div class="block p-6 rounded-lg shadow-2xl flex-1 ms-6 mb-10 break-words"> <div class="flex justify-between"> <h2 class="mt-0">Principal Product Security Engineer</h2> <h3 class=""> <span class="flex cursor-pointer"> <span class="rounded-md border border-primary-400 px-1 py-[1px] text-xs font-normal text-primary-700 dark:border-primary-600 dark:text-primary-400"> 2024 – Present </span> </span> </h3> </div> <h4 class="mt-0"> NielsenIQ </h4> <div class="mb-6"> <ul> <li> Lead the enterprise Penetration Testing program</li> <li> Drive Product Vulnerability Disclosure (VPD) and Bug Bounty initiatives</li> <li> Offensive security across Web, Mobile, APIs, Cloud and AI platforms</li> <li> Support Application Security through SAST, DAST, WAF and secure SDLC initiatives</li> <li> Partner with engineering teams on secure architecture and design reviews</li> <li> Build internal security tooling and automation</li> <li> Advance AI Security and secure adoption of LLM technologies</li> <li> Mentor engineers and help grow security culture across</li> product teams</li> </ul> <span class="flex cursor-pointer"> <span class="rounded-md border border-primary-400 px-1 py-[1px] text-xs font-normal text-primary-700 dark:border-primary-600 dark:text-primary-400"> Principal Engineer </span> </span> <span class="flex cursor-pointer"> <span class="rounded-md border border-primary-400 px-1 py-[1px] text-xs font-normal text-primary-700 dark:border-primary-600 dark:text-primary-400"> Product Security </span> </span> <span class="flex cursor-pointer"> <span class="rounded-md border border-primary-400 px-1 py-[1px] text-xs font-normal text-primary-700 dark:border-primary-600 dark:text-primary-400"> Penetration Testing </span> </span> <span class="flex cursor-pointer"> <span class="rounded-md border border-primary-400 px-1 py-[1px] text-xs font-normal text-primary-700 dark:border-primary-600 dark:text-primary-400"> AI Security </span> </span> </div> </div> </div> </li> </ol> <hr> <h2 class="relative group">Areas of Expertise <div id="areas-of-expertise" class="anchor"></div> </h2> <div class="flex flex-row flex-wrap items-center space-x-2"> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"></span><span><strong>Offensive Security</strong> · Web · API · Mobile · Cloud · Internal · External</span> </span> </span> </div> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"><span class="relative block icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"> <path fill="currentColor" d="M144 144v48H304V144c0-44.2-35.8-80-80-80s-80 35.8-80 80zM80 192V144C80 64.5 144.5 0 224 0s144 64.5 144 144v48h16c35.3 0 64 28.7 64 64V448c0 35.3-28.7 64-64 64H64c-35.3 0-64-28.7-64-64V256c0-35.3 28.7-64 64-64H80z"/></svg></span></span><span><strong>Application Security</strong> · Secure SDLC · Threat Modeling · SAST · DAST · WAF · Security Reviews</span> </span> </span> </div> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"><span class="relative block icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><path fill="currentColor" d="M0 336c0 79.5 64.5 144 144 144l368 0c70.7 0 128-57.3 128-128c0-61.9-44-113.6-102.4-125.4c4.1-10.7 6.4-22.4 6.4-34.6c0-53-43-96-96-96c-19.7 0-38.1 6-53.3 16.2C367 64.2 315.3 32 256 32C167.6 32 96 103.6 96 192c0 2.7 .1 5.4 .2 8.1C40.2 219.8 0 273.2 0 336z"/></svg></span></span><span><strong>Cloud Security</strong> · AWS · Azure · Containers · IAM · Kubernetes</span> </span> </span> </div> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"></span><span><strong>AI Security</strong> · LLM Security · Prompt Injection · AI Risk Assessment · Secure AI Adoption</span> </span> </span> </div> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"><span class="relative block icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"> <path fill="currentColor" d="M392.8 1.2c-17-4.9-34.7 5-39.6 22l-128 448c-4.9 17 5 34.7 22 39.6s34.7-5 39.6-22l128-448c4.9-17-5-34.7-22-39.6zm80.6 120.1c-12.5 12.5-12.5 32.8 0 45.3L562.7 256l-89.4 89.4c-12.5 12.5-12.5 32.8 0 45.3s32.8 12.5 45.3 0l112-112c12.5-12.5 12.5-32.8 0-45.3l-112-112c-12.5-12.5-32.8-12.5-45.3 0zm-306.7 0c-12.5-12.5-32.8-12.5-45.3 0l-112 112c-12.5 12.5-12.5 32.8 0 45.3l112 112c12.5 12.5 32.8 12.5 45.3 0s12.5-32.8 0-45.3L77.3 256l89.4-89.4c12.5-12.5 12.5-32.8 0-45.3z"/></svg></span></span><span><strong>Engineering</strong> · Python · Automation · CI/CD Security · Security Tooling</span> </span> </span> </div> <div class="flex mt-2"> <span class="rounded-full bg-primary-500 dark:bg-primary-400 text-neutral-50 dark:text-neutral-800 px-1.5 py-[1px] text-xs font-normal"> <span class="flex flex-row items-center"><span class="mr-1"></span><span><strong>Leadership</strong> · Technical Strategy · Mentorship · Security Programs · Cross-functional Collaboration</span> </span> </span> </div> </div> <hr> <h2 class="relative group">Education &amp; Certifications <div id="education--certifications" class="anchor"></div> </h2> <div id="accordion-c8a70921927a221e22586a969b714b2b" class="border border-neutral-200 dark:border-neutral-700 rounded-lg overflow-hidden" data-accordion="open" data-accordion-separated="false" > <details class="group border-none" data-accordion-item open > <summary class="flex w-full cursor-pointer items-center justify-between gap-4 px-4 py-3 text-left text-lg font-semibold text-neutral-900 dark:text-neutral-100"> <span class="flex items-center gap-2"> <span>Bachelor of Computer Science — Computer Networks &amp; Security</span> </span> <span class="accordion-chevron ms-auto flex h-5 w-5 items-center justify-center print:hidden"> <span class="relative block icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" fill="currentColor" aria-hidden="true" > <path fill-rule="evenodd" d="M5.23 7.21a.75.75 0 011.06.02L10 11.168l3.71-3.938a.75.75 0 111.08 1.04l-4.25 4.5a.75.75 0 01-1.08 0l-4.25-4.5a.75.75 0 01.02-1.06z" clip-rule="evenodd" /> </svg> </span> </span> </summary> <div class="px-4 pb-4 text-neutral-700 dark:text-neutral-300"> <p><strong>Universiti Teknologi Malaysia</strong></p>https://alsolaiman.com/ar/contact/Mon, 13 Jun 2022 20:55:37 +0100https://alsolaiman.com/ar/contact/<h2 class="relative group">تواصل معي <div id="تواصل-معي" class="anchor"></div> </h2> <p><p class="lead"> abdulah@alsolaiman.com </p> or on <span class="relative inline-block align-text-bottom icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="currentColor" d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z"/></svg></span> <strong><a href="https://www.linkedin.com/in/alsolaiman/" target="_blank" rel="noreferrer">LinkedIn</a></strong></p>https://alsolaiman.com/ar/blogs/a-deep-dive-into-iframe-src-attribute-leading-to-a-stored-xss-f191c3c67749/Tue, 19 Apr 2022 00:00:00 +0000https://alsolaiman.com/ar/blogs/a-deep-dive-into-iframe-src-attribute-leading-to-a-stored-xss-f191c3c67749/السلام عليكم ورحمة الله وبركاته Hi Everyone, it has been a while since I published my last article about AWS Take Over and I am coming with a new article about a deep dive into HTML elements and their attributes. Althou…https://alsolaiman.com/ar/blogs/from-git-directory-to-aws-ec2-network-takeover-5c0f9df1411c/Mon, 03 Jan 2022 00:00:00 +0000https://alsolaiman.com/ar/blogs/from-git-directory-to-aws-ec2-network-takeover-5c0f9df1411c/From .git directory to AWS EC2 network takeover Last week I was performing a penetration test. I was performing the test according to my own methodology and an interesting .git directory was publicly accessible. This .g…