Ibrahim Khalil Akil

Full Stack Developer | Ethical Hacker | Red Team Practitioner

Building secure software and assessing web, API, cloud, and infrastructure attack surfaces.

View Security Work Get In Touch

7

Documented Security Assessments

10+

Major Projects

5+ yrs

Years in Technology

About Me

I'm a Full Stack Developer and ethical hacker with a Computer Science degree from Islamic University in Lebanon. I bring 5+ years of hands-on technology experience, including professional software delivery since 2023 and authorized web, API, cloud, infrastructure, and red team security assessments.

Career Journey

  • 2023 - Early 2025 | Analytica Company

    Junior Mobile & Web Developer | Delivered 5+ production websites while maintaining a full-time position

  • Early 2025 - Present | Freelance Full Stack Developer

    End-to-end solution architect handling project management, analysis, budgeting, and complete implementation with AI-driven development

  • 2026 - Present | Ethical Hacker & Red Team Practitioner

    Security testing across anonymized SaaS, ERP, e-commerce, education, media, and embedded-device environments

Personal Details

Education: Computer Science Degree, Islamic University in Lebanon

Location: Montreal, Quebec, Canada

🎯 Key Strengths

  • Full-stack architecture & design
  • AI integration & optimization
  • Security-first development
  • Web & API penetration testing
  • Attack-surface reconnaissance
  • Project management & analysis
  • Client communication & delivery

💡 Specializations

  • E-learning platforms
  • Education management systems
  • Real-time chat & AI integration
  • Authentication & authorization testing
  • Multi-tenant application security
  • Payment processing (USDT/TRC20)
  • Video streaming optimization

Professional Experience

Ethical Hacker & Red Team Practitioner

2026 - Present

Independent Security Assessments | Confidential Engagements

Conducting remediation-focused security assessments across modern web applications, APIs, cloud-connected systems, and exposed infrastructure

  • Web & API Security: Tested REST and GraphQL applications, authentication flows, multi-tenant authorization boundaries, JWT-based sessions, and file-handling workflows
  • Vulnerability Research: Documented SQLi, IDOR/BOLA, authentication bypass, insecure upload/RCE, XSS, path traversal, sensitive-data exposure, rate-limit weaknesses, and security misconfigurations
  • Attack-Surface Mapping: Used passive intelligence, DNS and certificate-transparency research, subdomain and URL enumeration, service fingerprinting, and source/artifact review
  • Security Reporting: Produced executive summaries, evidence registers, severity classifications, attack-chain analysis, verified negative tests, and prioritized remediation guidance

Full Stack Developer - ChiBox

2026

Brainkets | Product Development

Worked with Brainkets as a developer of ChiBox, contributing directly to the product's implementation and delivery

  • Product Development: Developed ChiBox as part of the Brainkets team and helped turn the product requirements into a working digital platform
  • Full-Stack Delivery: Contributed across application architecture, feature implementation, integration, and production delivery
  • Team Collaboration: Worked directly with Brainkets throughout the development lifecycle to deliver the ChiBox experience

Freelance Full Stack Developer

Early 2025 - Present

Self-Employed | Remote

Architecting and delivering complete end-to-end solutions from conception to deployment

  • Project Management & Analysis: Conducting market research, feature analysis, budget planning, and technical specification creation
  • AI-Driven Development: Leveraging advanced AI models to accelerate development while maintaining code quality and minimizing hallucinations through strategic prompting and database validations
  • Client Relations: Direct communication with clients, proposing technical solutions, and building trust through professional delivery
  • Full-Stack Implementation: Complete coding from frontend to backend with focus on security, scalability, and user experience
  • Deployment & Optimization: Deploying on Vercel, Render, Railway with production-ready configurations

Junior Mobile & Web Developer

2023 - Early 2025 (2 years 2 months)

Analytica Company | Full-Time Position

Developed and delivered 5+ production websites while maintaining full-time employment and pursuing continuous self-development

  • Delivered multiple production-ready websites with modern tech stack
  • Maintained focus on clean code architecture and best practices
  • Self-taught latest AI models and integration techniques during personal time
  • Built foundation for end-to-end solution delivery capabilities

Ethical Hacking & Red Team Assessments

Seven documented engagements across web, API, cloud-connected, and infrastructure environments. Several assessments reached confirmed full-system compromise; every outcome below is limited to what the retained evidence supports.

Disclosure standard: Entries show target names, assessment context, and high-level finding classes only. No live domains, endpoints, payloads, credentials, personal data, or reproduction steps are published.

BrainSpace ERP

Web & API

Assessed tenant isolation, authentication boundaries, file handling, and exposed application services.

Outcome: Confirmed full-system compromise

Finding Classes

Auth BypassIDOR / BOLAPath TraversalFile UploadPre-Auth RCEData ExposureMisconfiguration

VioletPro / FoodServiceLB

Multi-System

Reviewed connected business applications, administrative surfaces, and data-handling workflows.

Outcome: Confirmed full-system compromise

Finding Classes

SQLiUpload RCEBroken AuthorizationStored XSSWeak CryptographyBackup Exposure

Omega Software

API Security

Validated cross-tenant controls, injection resistance, error handling, and automated-abuse protections.

Outcome: Confirmed high-impact cross-tenant access

Finding Classes

Time-Based SQLiCross-Tenant AccessPath DisclosureRate LimitingCAPTCHA Weakness

ChiBox / Brainkets

Web & Mobile

Assessed registration, upload, session, exposed-service, and client-side source controls.

Outcome: Confirmed full-system compromise

Finding Classes

Upload RCEPrivileged RegistrationSecret ExposureService ExposureSession Weakness

Lebanese International University

Education

Tested public and authenticated portal surfaces, session controls, input handling, and error behavior.

Outcome: Confirmed injection and sensitive-data exposure

Finding Classes

SQLiReflected XSSError DisclosureData ExposureCSRFCookie Security

Phenix Solutions Plus

Authorization

Evaluated account-resource isolation, registration workflows, and exposure of application internals.

Outcome: Confirmed cross-account resource access

Finding Classes

IDOR / BOLAPath DisclosureConfiguration ExposureSource ExposureWorkflow Weakness

Islamic University of Lebanon

Reconnaissance

Mapped public-facing education infrastructure and recorded confirmed exposure and negative test results.

Outcome: Confirmed public data exposure and attack-surface findings

Finding Classes

Directory ExposureData ExposureError LeakageNegative Testing

Featured Projects

IoT Solutions & Connected Systems

Main Focus

My primary project focus: building connected-device software that links device data, secure APIs, real-time processing, automation, and clear monitoring interfaces.

Core Capabilities

  • Connected-device and sensor integration
  • Real-time data collection and monitoring
  • Backend APIs and cloud-connected workflows
  • Operational dashboards and status visibility
  • Automation-ready system architecture
  • Security-first device and data handling
IoT Device Integration Real-time Data Cloud APIs Node.js React

Respike - Trading Learning Platform

In Production

A comprehensive educational platform for trading with integrated payment system and real-time communication

Scale: 150+ Active Users
Architecture: 3 Admin/Coach/User Panels + Mobile App (In Development)

Key Features

  • 🔐 USDT/TRC20 Payment Integration (3pay)
  • 📹 Video Streaming via Bunny.net (Optimized Performance)
  • 💰 In-App Transactions & Wallet Management
  • 📊 Manual & Automatic Wallet Systems
  • 🔄 Real-time Updates
  • 📱 Mobile Application (iOS & Android)
Next.js React NestJS MongoDB Firebase Blockchain
Live Demo

Internship Management System

Delivered

Complete 3-panel system for managing internship programs with integrated communication and AI features

Key Features

  • 👥 Admin, Mentor, Student Panels
  • 💬 Real-time Chat Integration
  • 🤖 AI Assistant Integration
  • 📝 Task & Progress Tracking
  • 🔐 Role-based Access Control
  • 📊 Analytics & Reporting
React TypeScript Express.js MongoDB Socket.io
Admin Portal Company Portal

School Management System

Delivered

Enterprise-grade education platform with comprehensive features for academic management and communication

Key Features

  • 🏫 Admin & Teacher Panels
  • 👨‍🎓 Student Portal with Courses
  • 📚 Course & Class Management
  • ✅ Assignment & Task Management
  • 💬 Integrated Messaging System
  • 🤖 AI-Powered Insights
Next.js TypeScript NestJS MongoDB
Admin Portal Teacher Portal

Routee - Taxi Management Platform

Live - 20+ Users

Real-time taxi management and booking system deployed on mobile platforms

Deployment: iOS App Store + Google Play (Certificate Available)
Active Users: 20+ Taxi Drivers in Venezuela

Key Features

  • 🗺️ Real-time GPS Tracking
  • 📱 Native Mobile Apps
  • 👔 Driver Management
  • 💳 Payment Integration
  • 📊 Route Optimization
  • 📞 Customer Support
React Native TypeScript Firebase Google Maps API

Football Coaching Platform

Delivered

Multi-role platform for football coaching with admin, coach, and user interfaces

Key Features

  • ⚽ Coach Management System
  • 👥 Admin & User Panels
  • 📹 Video Training Materials
  • 📊 Performance Tracking
  • 💬 Messaging System
  • 📱 Mobile Responsive
React Node.js MongoDB

Additional Projects

Completed

Portfolio of successful deliverables demonstrating diverse technical capabilities

  • Chinagate - E-commerce Platform (JavaScript, CSS)
  • Bietoven - Music Platform (JavaScript)
  • Food Service Admin Panel - Restaurant Management (TypeScript, React)
  • Food Service Web - Customer Portal (TypeScript, React)

Skills & Technologies

Offensive Security

Web Penetration Testing API Security Testing Red Team Assessments REST & GraphQL JWT OAuth & SAML Multi-Tenant Authorization Embedded Security

Reconnaissance & Security Tooling

Nmap Nuclei SQLmap HTTPx Subfinder Gobuster Masscan Shodan Certificate Transparency Passive DNS

Security Reporting

Executive Summaries Evidence Registers Severity Classification Attack-Chain Analysis Remediation Guidance Negative-Test Documentation

Frontend

React Next.js TypeScript React Native CSS/SCSS Responsive Design Redux Zustand

Backend

NestJS Express.js Node.js REST APIs Real-time Systems Authentication Authorization

Databases

MongoDB Firebase Firestore Real-time Sync Data Modeling

AI & ML Integration

Prompt Engineering AI Model Integration Hallucination Reduction AI-Assisted Development Natural Language Processing

Integrations & Tools

Bunny.net CDN 3pay (Payments) Blockchain (USDT/TRC20) Socket.io Google Maps API Video Streaming

Deployment & DevOps

Vercel Render Railway Git/GitHub CI/CD Docker

Specializations

End-to-End Solutions Project Architecture Security Best Practices Scalable Systems Code Optimization Client Communication

Business & Soft Skills

Project Management Budget Planning Client Relations Requirements Analysis Technical Documentation Problem Solving

By The Numbers

10+

Major Projects Delivered

7

Documented Security Assessments

20+

Live Mobile Users

5+

Production Websites (Analytica)

5+

Years in Technology

Let's Work Together

I'm open to full-stack engineering, application-security, and authorized red team opportunities. Feel free to reach out.

📧 Email

brhimakil@gmail.com

📱 WhatsApp

+1 514 451 5554

🐙 GitHub

github.com/brahimakil

💼 LinkedIn

LinkedIn Profile

📍 Address

Montreal, Quebec
Canada