Interface illustrationAll a Part
A secure information system bringing identity, network services, access management, and risk assessment together.
OpenLDAPVPNWeb / Mail / FTPEBIOS-RM
Cybersecurity engineerPersonal portfolio / 2026
OussamaBarbar.
I investigate vulnerabilities,
test security in practice,
and share what I learn.
Offensive security, research & consultingExplore security research
Responsible disclosure / 2026
Acknowledged
by Apple.
My name appears in Apple’s official security acknowledgements for iOS 27 and iPadOS 27, following a responsible vulnerability report.
The acknowledgement is listed under AutoFill in the page’s Additional recognition section.
View Apple acknowledgementIndependent security research and responsible disclosure.
Research, tools & practical security
Selected work(05)
Security engineering projects,
research, and hands-on education.
Interface illustration
Interface illustrationHomograph attack detection
Research into AI-based detection of fraudulent internationalized domain names used in homograph attacks.
AI-based detectionInternationalized domainsHomograph analysis
Interface illustrationAI-assisted pentesting
An automated penetration-testing workflow using CrewAI, spanning reconnaissance, assessment, and risk reporting.
CrewAIReconnaissancePenetration testingRisk reporting
Interface illustrationWebBugTool
A Python research tool for discovering subdomains and reviewing common web-application vulnerabilities.
PythonSubdomain enumerationXSS / SQL injectionLFI
FoxVoid Academy
A cybersecurity and ethical hacking training platform with hands-on paths in penetration testing and bug bounty hunting.
Cybersecurity educationPenetration testingBug bountyHands-on training
Oussama BarbarCybersecurity engineer
The researcher behind the work
Security through
investigation.
I’m a cybersecurity engineer focused on penetration testing, offensive security, and security consulting. My engineering background spans Télécom Paris and the Lebanese University.
I work across hands-on assessment and governance: investigating web vulnerabilities, preparing technical reports, and contributing to compliance and risk engagements.
Through FoxVoid Academy, I turn practical security knowledge into training and learning paths for penetration testing and bug bounty hunting.
Assessment, disclosure & security education
Experience
From network operations
to research and consulting.
2026 — PresentFounder & Cybersecurity InstructorFoxVoid Academy
Created a cybersecurity and ethical hacking training platform with hands-on learning paths in penetration testing and bug bounty hunting.
Security educationPenetration testingBug bounty
2023 — PresentBug Bounty HunterIndependent security research
Identified and responsibly disclosed web vulnerabilities affecting organizations including Yahoo, TeamViewer, and Withings through platforms such as YesWeHack and HackerOne. Prepared impact assessments and technical reports, with ongoing research into Android application security.
Responsible disclosureWeb securityAndroid research
Mar 2026 — Aug 2026Cybersecurity Consultant InternSIA Partners · Paris, France
Contributed to GRC and regulatory compliance engagements involving DORA and ISO 27001. Participated in Red Team exercises, Wi-Fi security audits, web penetration tests, and vulnerability assessments.
DORAISO 27001Red TeamWeb pentesting
Jul 2023 — Aug 2023Network Engineering InternOgero Telecom
Contributed to network operations involving switching, access networks, and data and voice transmission.
SwitchingAccess networksData & voice
A practical security toolkit
Technical expertise
Understanding the risk.
Communicating the findings.
Offensive security
Penetration testingRed TeamWeb securityWi-Fi security auditsBug bounty
Research & disclosure
Vulnerability assessmentImpact analysisTechnical reportingAndroid application security
Governance & risk
DORAISO 27001GRCEBIOS-RM
Tools & infrastructure
PythonCrewAIOpenLDAPVPNWeb / Mail / FTP
Teaching & communication
Cybersecurity instructionHands-on learningArabic · NativeFrench · FluentEnglish · Fluent
Education & professional development
A foundation
in security.
Engineering Degree in Cybersecurity
Télécom Paris
Engineering Degree in Computer Science and Telecommunications
Lebanese University · Faculty of Engineering (ULFG1)
Red Team training
TryHackMe · Simulated cybersecurity environments
Bug Bounty Certification
Semicolon Academy
Research & outreach
Invited to MTV Lebanon to discuss cybersecurity and bug bounty research. Recognized in organizational Halls of Fame for responsible disclosures.
Have an opportunity or a question?
Let’s talk
about security.
oussamabarbarfr@gmail.comPenetration testing, security research,
consulting, and hands-on education.