Saide Hossain

Professional Summary

Offensive Security Researcher and Exploit Developer specializing in vulnerability discovery, exploit creation, and advanced reverse engineering. Experienced in analyzing complex binaries, crafting reliable exploits for Linux and Windows environments, and researching cutting-edge security flaws. Passionate about bridging the gap between vulnerability research and practical offensive security operations, with strong skills in low-level systems, binary analysis, and security automation.

Experience

Freelance Bug Bounty Hunter
Ongoing

• Reported vulnerabilities through platforms like HackerOne and Bugcrowd
• Focused on high-impact bugs such as IDOR, SSRF, and logic flaws
• Utilized recon, automation, and fuzzing tools to uncover security issues

Exploit Developer (Independent Researcher)
Ongoing

• Created PoCs for stack/heap overflows, ROP chains, shellcode execution
• Studied real CVEs and recreated exploits on vulnerable environments
• Worked with Ghidra, IDA, pwntools, GDB, and x64dbg for binary analysis

Mentor — H4K2LIV3 Academy
February 2025 – Present

• Taught ethical hacking, Linux fundamentals, and red teaming techniques
• Developed and hosted CTF challenges for hands-on learning

Education

BSc (Hons) — Major in Physics

Skills

• Core Expertise: Offensive Security Research, Exploit Development, Reverse Engineering, Vulnerability Research
• Programming Languages: C, C++, Assembly (x86/x64), Python, Bash, PowerShell
• Reverse Engineering Tools: Ghidra, IDA Pro, Binary Ninja, Radare2, GDB, WinDbg, x64dbg, Frida
• Exploit Techniques: Stack & Heap Overflows, ROP Chains, Shellcode Injection, Format String, Use-After-Free
• Security Testing: Penetration Testing, Bug Hunting, Fuzzing (AFL++, libFuzzer), Crypto Analysis
• Platforms & OS: Linux (Kali, BlackArch), Windows
• Tools: Metasploit, Burp Suite, Nmap, Wireshark, pwntools, Docker
• Mitigation Bypass: ASLR, DEP/NX, Stack Canaries, PIE, CFG/EAF, AV/EDR Evasion

Hands-on Experience

• TryHackMe — Completed 100+ rooms
• VulnHub — Rooted boxes like MrRobot, Kioptrix
• CTF — Active competitor in pwn, reversing, and web challenges
• Bug Bounty — Disclosed vulnerabilities on major platforms

Projects

• Mr Linux: Linux and bash scripting learning project
• Assembly Tutor: Assembly x86(64) learning project
• Learn RSA Interactively: RSA encryption and decryption teaching project

Certifications

• eJPT (In Progress)
• OSCP (Target: August 2025)