Monsif Hmouri (MONSTRM1ND) Ethical Hacker & Cybersecurity Researcher

Monsif Hmouri, widely known online as MONSTRM1ND, is a Moroccan ethical hacker, cybersecurity researcher, and software developer interested in vulnerability discovery, web application security testing, digital systems protection, and the development of technical tools that help security researchers identify risks and improve cybersecurity.

His work combines practical cybersecurity research with software development and an interest in promoting safer use of digital technologies. His activities focus on testing systems within authorized scopes, analyzing security weaknesses, documenting findings, and promoting responsible vulnerability disclosure.

Cybersecurity and Ethical Hacking

Monsif Hmouri focuses on ethical hacking, particularly vulnerability research and Bug Bounty programs. These programs allow independent security researchers to test digital platforms within defined scopes and report discovered vulnerabilities to the organizations responsible for fixing them.

His technical interests include:

• Web application security and API security.
• Broken Access Control vulnerabilities.
• IDOR and user authorization weaknesses.
• Session management and authentication mechanisms.
• File upload security and file management vulnerabilities.
• Security reconnaissance and digital asset discovery.
• Technical vulnerability reporting and remediation recommendations.

Among the technical research published under his name is an article examining unauthorized file deletion across separate user sessions due to insufficient ownership validation and access control mechanisms.

This type of research highlights the importance of enforcing authorization checks on the server side rather than treating file identifiers as proof of ownership or permission.

Bug Bounty Participation

Monsif participates in the cybersecurity research field through Bug Bounty programs, focusing on testing applications and digital services and preparing reports that explain vulnerability reproduction steps, security impact, and recommended remediation measures.

This work forms part of the collaborative cybersecurity ecosystem, in which independent researchers help organizations identify security weaknesses before they can be exploited maliciously.

Membership in the National Organization for Electronic Protection

Monsif Hmouri is a member of Morocco’s National Organization for Electronic Protection (Organisation Nationale de Protection Électronique – ONPE).

The organization describes itself as a non-governmental organization established in 2016. Its mission includes supporting individuals affected by cyber extortion, online defamation, and digital abuse, as well as providing technical and legal assistance to victims.

According to its official website, the organization brings together volunteers and individuals with experience in computing and cybersecurity. Its activities include supporting victims of digital offences and promoting awareness of cybercrime and online safety.

Monsif’s membership reflects his involvement in digital protection and cybersecurity-related activities, alongside his technical work in security research and software development.

Technical Projects

1. SubMonsif

SubMonsif is a subdomain enumeration tool developed by Monsif using the Go programming language. It is designed to assist cybersecurity researchers during reconnaissance and digital asset discovery through multiple subdomain enumeration techniques.

Project repository:

https://github.com/monsifhmouri/SubMonsif

2. GhostTalk

GhostTalk is an experimental secure messaging project designed to explore communication without requiring an internet connection or centralized servers.

It uses direct device-to-device communication technologies, including Bluetooth and Wi-Fi Direct, with an emphasis on privacy, encryption, and reducing dependence on external infrastructure.

The project includes a security component called Ghost Center and explores local encryption and direct communication between devices.

Project repository:

https://github.com/monsifhmouri/GhostTalk

3. MaghSec – Maghreb Security

MaghSec is a cybersecurity-related initiative focused on security research and vulnerability discovery in the Maghreb region.

According to the project's published description, its objectives include encouraging responsible vulnerability disclosure, strengthening cooperation between organizations and security researchers, and promoting lawful security testing practices.

Project repository:

https://github.com/monsifhmouri/MaghSec

Technical Writing and Publications

In addition to practical security research, Monsif Hmouri publishes technical content covering cybersecurity, ethical hacking, and vulnerability research.

Through technical publishing platforms, he shares research experiences, technical ideas, and discussions about security weaknesses and approaches to identifying and addressing them.

Professional Vision and Principles

Monsif Hmouri's approach to cybersecurity is based on several principles:

• Using hacking skills for defensive security and legitimate research.
• Respecting applicable laws and authorized testing scopes.
• Promoting responsible vulnerability disclosure.
• Developing technical tools that support security research and analysis.
• Raising awareness of data protection and digital privacy.
• Encouraging collaboration between security researchers and organizations to address cyber threats.

Online Presence

Monsif's public work and technical projects can be explored through the following platforms:

• GitHub: https://github.com/monsifhmouri
• LinkedIn: https://www.linkedin.com/in/monsifhmouri/

Monsif Hmouri (MONSTRM1ND) is a Moroccan cybersecurity enthusiast and researcher whose activities combine ethical hacking, Bug Bounty research, software development, and digital protection initiatives.