Research
Paper accepted at IEEE WETICE 2026
AI-driven threat knowledge platform inspired by MITRE ATT&CK.
Read the abstract// AI offensive security · LLM red-teaming
Mootez Ben Slimen, also known as 3angour
AI offensive security, Red-teaming LLMs @ AnTitech, CTF player · CSAW '26 finalist, Challenge author, Cybersecurity Master's student
Cybersecurity Master's student and CTF player. I break LLMs and chatbots before attackers do — jailbreaks, prompt injection, data poisoning — then write up how.
- target
- LLMs · chatbots · agents
- vectors
- jailbreak / prompt injection / data poisoning
- last op
- CSAW CTF '26 — #1 MENA · #2 world
- research
- IEEE WETICE '26 — accepted
- base
- Ariana, Tunisia
- status
- open to opportunities
// 00 — signal
Latest wins
CTF
- MENA
- #1
- Worldwide
- #2
CSAW CTF 2026 quals
1st in MENA, 2nd worldwide. Qualified for the Finals.
Read the CSAW write-ups
// 01 — operator profile
Breaking AI systems before someone else does.
Master's student in Cybersecurity with a strong background in software engineering, CTF competitions and Python automation. Excellence Scholarship recipient at MedTech University, and a full-scholarship alum of the University of Zurich's Deep Dive into Blockchain summer school.
AI offensive security
Red-teaming LLMs and chatbots — jailbreaks, prompt injection and data poisoning — and building the tooling that helps autonomous agents find new ones.
Capture the flag
Web, forensics, MISC and pyjails. Competitor, team lead and challenge author for national CTFs.
Threat research
Dark Web intelligence mapped to MITRE ATT&CK, OSINT automation and vulnerability operations.
// 02 — field notes
CTF write-ups
CTF writeups & security insights
CSAW 2026 — CSALE: SQLi, XOR Credentials and a Honeypot Flag
Three chained bugs and a deliberate canary. The obvious path ends on a planted flag that gets you banned; the real one needs a client-side attempt counter and a 10,000-PIN sweep.
- #csaw-2026
- #web
- #sqli
- #crypto
CSAW 2026 — dino2auth: Forging OIDC Tokens
Two first-party identity providers, one of which forgot to pin its signing certificate. An error oracle in the callback exposed the gap, and the admin gate keyed off scope rather than sub.
- #csaw-2026
- #web
- #oidc
- #jwt
CSAW 2026 — Flag Checker: A Timing Oracle You Control the Gain Of
The per-character delay multiplier came from your own User-Agent. Crank it up and the signal saturates — most of the work was stopping the measurement methodology from lying.
- #csaw-2026
- #web
- #timing-attack
- #side-channel
// 03 — arsenal
Selected projects
Tools, AI platforms & security tooling
- Completed
OceanClean — Blockchain Ocean Cleanup Marketplace
Final project for Group 13 at the University of Zurich's Deep Dive into Blockchain summer school. Closes the trust gap that keeps ocean cleanup underfunded: a marketplace where verified collectors are paid directly in OCT tokens for proven waste retrieval. Tamper-resistant payout model verified independently before release and weighted by material value and retrieval difficulty, plus a self-sustaining funding loop routing recycler purchases and donor contributions into a liquidity pool.
- Blockchain
- Smart Contracts
- Token Design
- UZH DDiB
No public repository
- Completed
CapAI — Founder Intelligence Platform
Multi-source founder data aggregation engine (FastAPI, aiohttp, asyncio) normalizing LinkedIn, GitHub, Product Hunt and DEV.to profiles into structured JSON. Identity resolution via multi-engine search cascade + GitHub API verification. LightGBM classifier predicting startup acquisition/IPO success — ROC-AUC 0.84 on 196K companies.
- FastAPI
- asyncio
- LightGBM
- Python
- +1 more
- Completed
Forgot me ? — Local-First Cognitive Assistant
Privacy-first mobile + backend system that scans documents, images, audio and calendars on-device and indexes them with a local LLM (Qwen2.5-3B via Ollama) — no data ever leaves the network. Multi-modal ingestion (PyMuPDF, BLIP, Whisper), self-verifying RAG pipeline with ChromaDB, React Native/Expo app. Built for AIMinds Hackathon (5th place).
- Ollama
- ChromaDB
- Whisper
- BLIP
- +3 more
- Research
AI-Driven Threat Knowledge Platform
Research project accepted at IEEE WETICE 2026 (Paris). Aggregates Dark Web intelligence and maps threat actors, techniques and indicators to the MITRE ATT&CK framework to proactively enrich threat knowledge bases.
- AI/ML
- MITRE ATT&CK
- Dark Web Intelligence
- Threat Intel
No public repository