Yassine Aboukir is a seasoned application security engineer and white-hat hacker with over eight years of experience in bug bounties, pentesting, and security consulting, currently serving as HackerOne Brand Ambassador for Morocco and Lead Pentester. He has responsibly disclosed over 750 vulnerabilities to major organizations, earned a Top-20 HackerOne ranking, won multiple live-hacking competitions including MVH at H1-303, and serves on HackerOne’s Hacker Advisory Board. Yassine blends hands-on tooling work—authoring the Sublert certificate-transparency subdomain monitor—with program management and triage experience from roles validating and coordinating large-scale bounty programs. He also consults independently on assessments, code reviews, and training, and has contributed technical writing to Infosec Institute. Holding two master’s degrees in management information systems and corporate finance, he uniquely combines deep technical craft with business and program leadership. Based in Paris, he focuses on building inclusive local communities for security researchers while continuing to hunt real-world vulnerabilities.
8 years of coding experience
2 years of employment as a software developer
Economy Commerce and Technology, Economy Commerce and Technology at Classes Préparatoires aux Gandes Écoles de Commerce (CPGE)
Master’s Degree Business Administration and Management General, Master’s Degree Business Administration and Management General at Groupe ISCAE
Master’s Degree Management Information Systems General, Master’s Degree Management Information Systems General at IÉSEG School of Management
Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
Role in this project:
Security Engineer
Contributions:60 commits, 6 PRs, 46 pushes in 1 year 11 months
Contributions summary:Yassine primarily contributed to the development of a security and reconnaissance tool, "Sublert," designed to monitor subdomains using certificate transparency. Their work included the initial implementation of the core functionality, adding configuration options, fixing minor issues, and integrating Slack-based error logging. They also improved domain name validation and implemented measures for duplicate domain checking, and made various improvements to the DNS resolution functionality.
Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
Contributions:67 commits, 1 PR, 55 pushes in 3 years 5 months
ipv4ipv6port-scanningasnbugbounty
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.