Skip to content
View DeadPackets's full-sized avatar
πŸ’»
Hacking away
πŸ’»
Hacking away

Highlights

  • Pro

Block or report DeadPackets

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DeadPackets/README.md

Hi, I'm DeadPackets (Youssef Awad)!


Won "Best Emirati Startup" with CTFae @ GISEC UAE 2024
Head of Engineering @ CTFae Β· Full-stack, DevOps & security engineer who builds and ships with agentic AI Β· OSCP Β· Guinness World Record (largest CTF)


$> whoami

  • Head of Engineering & Co-Founder at CTFae
  • OSCP-certified. I ship AI and break it like an attacker (5+ years in offensive security)
  • DevOps enthusiast. I automate everything
  • Cybersecurity educator and community builder
  • Computer Engineering graduate (+ CS minor) from AUS
  • ⭐ Over my 10 years on GitHub, I have opened 151 issues, opened 158 PRs, pushed 6365 commits, created 43 repositories, contributed to 61 projects, gathered 87 stars across all my repos and gists

$> cat resume.txt

Period Company Role
2021 - Present CTFae Head of Engineering & Co-Founder
2022 - Dec 2025 Malcrove Senior Cyber Security Consultant
2019 - 2024 GDI.Foundation Volunteer

$> ls -la projects/

βš™οΈ Platform & Infrastructure
Private Challenge Deployment API
Provisions containerized CTF challenges to AWS ECS on demand and auto-scales. Ran the world's largest CTF at 10,000+ concurrent users (BlackHat MEA, Guinness World Record).
Python FastAPI AWS ECS
Private CyberRanges
IaC platform that spins up multi-VM attack-defense environments across AWS and GCP.
Terraform Ansible Packer
Private Attack-Defense Checksystem
Real-time scoring for 100+ teams at once, with Celery workers and PgCat-pooled PostgreSQL.
Python Celery Redis
πŸ€– Agentic AI & LLMs
Private ProjectHailMary
Solo-operated agentic vulnerability finder. One orchestrator drives 60+ charter-bearing subagents through a validation gauntlet into a deterministic CLEAR / HOLD / REJECT verdict. 23 modules, 465+ tests.
Python
Private LLM-AD-Defense
Autonomous SOC analyst on Gemini 2.5 Pro. It ingests Wazuh EDR alerts, reasons about the threat, and runs its own remediation, down to isolating a compromised Active Directory account.
Python FastAPI
Live LLMChessArena
Any LLM vs any LLM, Stockfish, or a human, over OpenRouter. Real-time WebSocket streaming, move-by-move Stockfish evals, and a live leaderboard. (code)
TypeScript React Vite
Live BuzzerMinds
A live multiplayer trivia party game. Every question is LLM-generated and grounded against real sources via SearXNG, with fact cards and strict schemas to keep the AI honest.
Next.js Python FastAPI
Code PiCodeReview
Multi-tier agentic code reviewer on the Pi SDK: cheap-model hunters over-report, a frontier-model judge re-reads the code and prunes the false positives. A 30-minute take-home challenge.
TypeScript
πŸ“Š Data & Web
Live VisualizeAUS
20 years of my university's course data turned into an interactive exploration (Plotly + Quarto).
Python Jupyter
Code AUSCrawl
The crawler behind it: pulls AUS's Banner registration system into a clean, analyzable dataset.
Python
Live DOSArchive
My dad's (Yasser Awad) old DOS programs, emulated so you can run them right in your browser.
Astro

$> cat skills.txt

πŸ€– Applied AI / LLMs
I build systems that use LLMs, not train them
Claude Gemini Codex OpenRouter
Multi-agent orchestration, RAG, evals & guardrails, prompt engineering.
πŸ›‘οΈ Security
OSCP Β· 5+ years offensive
OSCP (verify on Credly)
Penetration testing, red teaming, Active Directory, vulnerability assessment.
πŸ’¬ Languages
Daily drivers
Python, TypeScript, JavaScript, Bash
🎨 Frontend
Type-safe and modern
React, Next.js, Vite, Tailwind CSS
πŸ”§ Backend & APIs
Async, typed, queue-driven
FastAPI, Express, Flask, PostgreSQL, Redis, RabbitMQ, Nginx
Hono Β· Celery Β· Pydantic Β· SQLAlchemy
☁️ Cloud / DevOps
Ship it and automate it
Docker, Terraform, Ansible, AWS, GCP, GitHub Actions, Cloudflare

$> cat life.txt | grep "Achievements"

πŸ† Awards & Recognition
  • [2024] πŸ† Guinness World Record for the largest CTF in the world with CTFae @ BlackHat MEA 2024 (link)
  • [2025] πŸ† Won "Best Community Engagement" with CTFae @ UAE CyberSecurity Awards 2025 (link)
  • [2024] πŸ† Won "Best Emirati Startup" with CTFae @ GISEC UAE 2024 (link)
  • [2024] πŸ† Became the Official CTF Partner for GISEC UAE (link)
  • [2021] πŸ† Awarded the "Outstanding CSE Student Talent Award" at AUS (link)
  • [2021] πŸ† Created & hosted the longest CTF in UAE with CTFae (link)
πŸ’» Events Hosted with CTFae
  • [2025] Hosted the first ever Bug Bounty CTF @ DEFCON 33 (link)
  • [2025] Hosted the Dubai Cyber Security Challenge @ GITEX 2025 (link)
  • [2025] Hosted the Bahrain National CTF (link)
  • [2025] Hosted BSides Nashville CTF (2nd year) (link)
  • [2024] Hosted CTF @ GITEX GLOBAL showcasing Cyber Drill technology (link)
  • [2024] Hosted CTF for BSides Nashville (first USA CTF!) (link)
  • [2023] Hosted the ADQ CTF (link)
  • [2023] Hosted CTF for BlackHat Saudi Arabia (link)
  • [2023] Hosted CTF for GITEX Africa in Morocco (link)
  • [2023] Hosted CTF for HITB Amsterdam (link)
  • [2022] Hosted Dubai Police CTF (link)
  • [2022] Hosted CTF for the first BlackHat in Saudi Arabia (link)
  • [2022] Hosted CTF for Government of Thailand @ TBCERT (link)
  • [2021] Hosted the largest CTF in the Middle East @ AtHack (link)
  • [2021] Hosted jeopardy CTF @ HITB CyberWeek (link)
🎀 Speaking & Training
  • [2024] Gave CTFae's first Cyber Drill workshop @ HITB SecConf Thailand (link)
  • [2024] Talk about CTFae's story and success @ CPX CyberAlley (link)
  • [2021] 2-day training in Attack Defense CTFs @ HITB SECCONF (link_1) (link_2)
  • [2020] Demonstrated password stealing Windows attack @ GISEC (link)
  • [2019] Invited speaker @ DESC UAE
πŸ₯‡ CTF Competition Wins
Year Place Competition
2021 πŸ₯‡ 1st The Hunt SOCathon @ GISEC (link)
2020 πŸ₯‡ 1st CyberKnight CTF (link)
2020 πŸ₯‡ 1st CyberTalents UAE Regional CTF (link)
2020 πŸ₯‡ 1st HITB Lockdown CTF (link)
2019 πŸ₯‡ 1st CyberBattle Of The Emirates (link)
2019 πŸ₯ˆ 2nd HITB AI Challenge (link)
2019 πŸ₯‰ 3rd CyberTalents Arab Regional CTF (link)
2019 πŸ₯‡ 1st CyberTalents UAE Regional CTF (link)
2019 πŸ₯‡ 1st Dubai Police CTF (link)
2018 πŸ₯‡ 1st CyberQuest Attack & Defence (link)
2016 πŸ₯‡ 1st CyberQuest CTF (link)
2016 πŸ₯ˆ 2nd NYU CSAW Forensics CTF (link)

$> git show stats

deadpackets GitHub contribution streak

$> spotify_cli --currently-playing

spotify-github-profile

This README generates every 3 hours. It was last generated Wednesday, June 3rd 2026, 1:06:12.

Pinned Loading

  1. AUSCrawl AUSCrawl Public

    A crawler for AUS' Banner Page. Probably a great tool for practicing data science and statistics.

    Python 3 3

  2. DOSArchive DOSArchive Public

    An archive of my Dad's (Yasser Awad) old DOS programs that you can interact with directly in your browser.

    Astro 1 1

  3. pwnbox pwnbox Public

    A Kali-based docker container pre-built with tools, ZSH, and SSH.

    Shell 14 8

  4. FaxMeMaybe FaxMeMaybe Public

    A TODO and reminder system that is way too over-engineered. Inspired by Laurie HΓ©rault's article and Coding With Lewis' YouTube video.

    TypeScript 1

  5. HashSteal HashSteal Public

    The source code of the attack I demoed at GISEC 2019

    Shell

  6. LLMChessArena LLMChessArena Public

    An arena for making two LLMs compete against each other in a chess game with live commentary, move evaluation and more.

    TypeScript 2