Certificate Verification
Ethical Hacking & Bug Bounty - Full Roadmap (120H)
Issued on 20 Sept 2026
✓ Verified
Official TechTrek record
Certificate Summary
Student Name
Joseph Wafiq Edward
- Certificate ID
- CERT_000663
- Verification Status
- Verified
- Certificate
- Ethical Hacking & Bug Bounty - Full Roadmap (120H)
- Issue Date
- 20 Sept 2026
Academic Information
- University
- Helwan National University
- College
- Computer Science
- University Student ID
- 931230093
- Track
- Bug Bounty & Ethical Hacking
- Credit Hours
- 140 H
- Delivery Mode
- Online
Learning Roadmap
Curriculum topics are displayed from the Roadmap snapshot stored on this certificate.
Level 1 - Module 1: Foundations of Web Security & Ethical Hacking
- Introduction to Cybersecurity & Web Security
- Introduction to the OWASP Top 10
- Bug Bounty Programs
Level 1 - Module 2: Reconnaissance & Information Gathering
- OSINT Techniques & Target Enumeration
- NGINX as a Reverse Proxy and Load Balancer
- NGINX Advanced Topics & Performance Optimization
Level 1 - Module 3: Authentication & Access Control Bypasses
- 2FA Bypass Techniques & Logic Flaws
- Broken Authentication
- Session Management Exploits
Level 1 - Module 4: Business Logic & Logical Vulnerabilities
- Understanding Logical Flaws in Web Applications
- CAPTCHA Bypasses
- Rate Limiting Bypass
Level 2 - Module 5: Client-Side Security & Cross-Site Attacks
- Hands-on Labs: PortSwigger XSS Exploits
- Clickjacking
- UI Redressing Attacks
Level 2 - Module 6: Path Traversal & File-Based Attacks
- Hands-on Labs: PortSwigger Path Traversal
- Misconfigured File Upload Vulnerabilities
Level 2 - Module 7: Advanced HTTP Request Smuggling
- Hands-on Labs: PortSwigger HTTP Smuggling
- Identifying Frontend-Backend Parsing Discrepancies
- Web Desync Attacks
Level 2 - Module 8: Supply Chain Attacks & Final Project
- Exploiting Open-Source Dependencies in Web Applications
- Hands-on Labs: PortSwigger Supply Chain Attacks
- Final Capstone Project Execution
Completed Tasks
✓Backup CTF on RootME (Flag required)
✓CSRF Report (Portswigger Academy)
✓How to calculate vulnerabilities severity
✓information disclosure Lap (portswigger)
✓Research
✓Research about How to escalate Blind SSRF to remote code execution
✓Root Me Challenge (Report Required)
✓Search about HTTP headers