CEO & Founder of Khly Balak Security - Lead Cybersecurity Instructor- Ethical Hacker - Specialist
Yassin Salah El-Din is a fierce and hardworking cybersecurity instructor, self-made, with a “no excuses” mindset. His mission is to ignite the biggest cybersecurity movement in the Middle East. His goal? To equip people with practical penetration testing skills, uncover hidden online threats, and teach them how to protect themselves with awareness and real tools.
Taught 100+ cybersecurity bug hunters... and still counting
Foundational certificate introducing core principles of cybersecurity. Covers the CIA triad (confidentiality, integrity, availability), common attack types, basic defensive concepts, and security best practices. Designed to build awareness of how threats operate and how security measures protect systems and data. Key skills: threat awareness, security fundamentals, risk concepts, introduction to defense & attack surface.
Verify
Foundational technical certificate that establishes the core knowledge required for offensive and defensive work. Teaches TCP/IP fundamentals, common protocols, operating system basics (Linux/Windows), basic scripting logic (bash/python snippets), and core security concepts (auth, access control, attack surface). Designed to prepare learners for hands-on labs and tool-based workflows. Key skills: networking fundamentals, OS basics, command-line tooling, introductory scripting, security concepts and terminology.
Verify
Introductory-level certification that explains cybersecurity concepts in clear, non-technical language. Focuses on the global impact of cyber threats, core security principles, risk management, and how individuals and organizations can protect digital assets. Ideal for building foundational awareness before advancing to technical skills. Key skills: cybersecurity fundamentals, risk & threat awareness, digital protection strategies, policy-level understanding.
Verify
Entry-level professional cert focused on operational pentesting tasks used in real-world assessments. Candidates demonstrate host and network scanning, basic exploit development/usage (Metasploit, manual payloads), credential attacks, simple post-exploitation (enumeration, lateral movement basics), and structured reporting of findings with technical reproduction steps. Key skills: port/service discovery, exploit verification, basic shell access & enumeration, credential and config weakness discovery, technical report writing.
VerifyPractical, lab-based certification proving proficiency in end-to-end offensive engagements. Covers discovery and enumeration (nmap, ffuf, dirb), vulnerability validation (Burp Suite, manual HTTP tampering), exploitation techniques (SQLi, RCE, XSS), and PoC development. Emphasizes chain-of-exploit thinking, privilege escalation, and producing reproducible technical evidence for remediation. Key skills: reconnaissance, web app fuzzing, proxy-based testing, exploitation pipelines, PoC creation, remediation guidance.
Verify
Industry-recognized hands-on certification validating practical penetration testing workflow and professional practices. Includes planning and scoping, vulnerability scanning, manual exploitation (web, network, wireless), post-exploitation analysis, and formal reporting. Emphasizes tool-agnostic methods, risk-based prioritization, and deliverables suitable for enterprise engagements. Key skills: test planning, vulnerability validation, exploitation techniques, post-exploit analysis, risk assessment, professional reporting.
Verify
Advanced, adversary-emulation certification focused on end-to-end attack operations. Covers threat modeling, custom tooling, covert access (OPSEC), C2 frameworks, lateral movement, persistence, and full-chain post-exploitation with emphasis on stealth, detection avoidance, and realistic attack playbooks. Ideal for demonstrating ability to simulate sophisticated attacker tactics and produce defensive improvements from operator-level findings. Key skills: adversary emulation, C2 orchestration, OPSEC-aware payloads, lateral movement, persistence, detection & mitigation guidance.
Verify