Anas Magane
Offensive Security Engineer · Fes, Morocco

Founder (CTO) of Aramon IT and cybersecurity engineer specialized in web application, API, network infrastructure and Active Directory penetration testing.
Experienced in delivering security assessments and remediation reports, building offensive security tools and automation, and teaching hands-on cybersecurity to students and a large YouTube audience.
Now
Aramon (opens in a new tab) · Founder (CTO). Building Aramon Academy, Aramon Report and Aramon Labs.
Anas Education (opens in a new tab) · Cybersecurity content on YouTube covering penetration testing, web security and CTFs.
Experience
Founder (CTO) · Aramon IT (opens in a new tab)
Founded Aramon, an online IT school where students learn the fundamentals and then specialize in domains such as cybersecurity, DevOps and cloud. Built the company’s products: Aramon Report, Aramon Academy and Aramon Labs.
Cybersecurity Content Creator · YouTube · Anas Education (opens in a new tab)
Run one of Morocco’s leading cybersecurity YouTube channels, teaching penetration testing, web security and CTFs in Moroccan Darija.
Cybersecurity Trainer · ETEiP
Delivered hands-on training in web/API security, network security, Active Directory and penetration testing; coached students on pentest methodology and professional reporting. Conducted digital forensics analysis exercises and explained exploitation paths and remediation to learners.
Freelance Penetration Tester · Moratel
Assessed web applications and infrastructure; documented vulnerabilities, business impact and actionable remediation in client reports.
Security Engineering Intern (PFE) · BTRUST Advisory & Technology
Built VulnTrust, a vulnerability monitoring platform with automated alerts, PDF reports and AI-assisted remediation suggestions.
Active Directory Security Intern (PFA) · CHU Fes
Built a custom Active Directory lab to execute full kill-chain attacks, from enumeration to exploitation.
Education
State Engineer’s Degree in Telecommunications and Networks · ENSA, Fes
Credentials
eWPTX (INE Security), eJPT (INE Security), CRTA (CyberWarfare Labs). All certifications
- Penetration testing
- Web applications, APIs, Network infrastructure, Active Directory, Vulnerability assessment, Manual exploitation, Privilege escalation, Bug bounty, Reporting
- Methods & tools
- OWASP WSTG, OWASP Top 10, PTES, Burp Suite, Nmap
- Development & systems
- Python (Django, Flask), JavaScript (Next.js), SQL (PostgreSQL, MySQL), Linux, Windows Server, Docker
- Cloud
- Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS)
Profiles & contact
- GitHub (opens in a new tab)
- LinkedIn (opens in a new tab)
- YouTube (opens in a new tab)
- TryHackMe (opens in a new tab)
- Instagram (opens in a new tab)
- anasmagane1@gmail.com