Ahmed Sultan
0x4148
Security Engineering · Red Teaming · Offensive Security
I’ve spent over 13 years in cybersecurity, working with different organizations, solving complex security problems, and occasionally creating a few problems of my own.
My journey has taken me through government, enterprise security, offensive research, and building cybersecurity companies. Different roles, different challenges, and plenty of stories worth telling.
Today, I’m a co-founder of DeXpose and lead Security Engineering and Red Team activities at Callsign.
There’s a lot more to the story, but I’ll save that for another page.
Selected research
Explore the blog →A collection of security research, vulnerability discoveries, and technical publications from over the years.
- FreePBX 17: From SQL Injection to Remote Code Execution advisories
- Ten Years Later, A2Billing Still Had a Few Surprises advisories
- Elastix voip distro all versions < 3 , Remote command execution exploit advisories
- Boonex dolphin <= 7.3.2 , Auth bypass / RCE exploit advisories
- CS-Cart <= 4.3.10 , XXE/LFD advisories
- Real world pentesting scenario I [Arabic] pentest