Open to opportunities

Xander Morales

@xandermorales

Message

I find and validate web application vulnerabilities through hands-on penetration testing and security assessments.

Ecuador

Message

What I'm looking for

I'm looking to continue developing in penetration testing and web security assessments, applying responsible vulnerability analysis, reporting, and retesting while progressing toward OSCP certification.

I've participated in seven security assessments for production applications at OXTEAMS OPSEC, identifying and validating vulnerabilities including confirmed XSS and remote command execution.

I analyze tool-detected findings for impact, reproducibility, and exploitation potential, then communicate results through technical and executive reporting. I also support retesting and severity scoring using CVSS v3.1.

At Alfanet Ecuador, I supported CPE device migration to TR-069/ACS and monitored vulnerability advisories reported by national teams.

I'm pursuing a Bachelor's in Cybersecurity Engineering and actively training for the OSCP through Hack The Box, Proving Grounds, and PortSwigger.

Experience

Work history, roles, and key accomplishments

Cybersecurity Internship

Scylnir YouTube Channel

May 2025 - Nov 2025 (6 months)

Participated in seven security assessments for production applications, identifying and validating high-severity vulnerabilities including XSS and RCE. Analyzed tool-detected findings, prioritizing impact, reproducibility, and exploitation potential.