About Yaniv Haliwa
Yaniv Haliwa is an independent cybersecurity researcher and penetration tester working between Israel and the Philippines. His work is hands-on and offensive-security focused: finding, proving and documenting real vulnerabilities rather than producing theoretical risk assessments.
Background
He works daily on Kali Linux and builds most of his own tooling in Python. The recurring theme across his projects is automation — turning a manual testing technique into a repeatable script, then into a tool other people can run. That applies equally to reconnaissance, credential testing, wireless auditing and reporting workflows.
His day-to-day testing covers web application security (cross-site scripting, CSRF and SQL injection), network and wireless assessment, brute-force and credential attacks, and reconnaissance against defined scopes. He participates in CTF competitions and works through practical labs on TryHackMe and Hack The Box, where his current standing is published live on the site's home page and through the public API.
Specialisms
- Penetration testing: vulnerability assessment, exploitation and security auditing
- Python security automation: custom tools and scripts that automate security workflows
- Web application security: finding and exploiting XSS, CSRF and SQL injection
- Network and wireless security assessment
- Exploit development and reconnaissance
- Capture-the-flag competition and applied lab work
What he publishes
Yaniv maintains several public projects: RootShell, a security research blog carrying writeups and techniques; CyberTools, a browser-based offensive security toolkit; CyberDict, a searchable cybersecurity terminology reference; plus open-source tools including WatchWise, WifiSec and a Linux administration toolkit. All of them are free and publicly accessible.
Ethics and scope
All work described on this site is authorised security testing, research, or competition activity. Tools are published for defensive and educational use and for legitimate, permissioned engagements. Yaniv does not perform unauthorised testing against systems he has no permission to assess.
Elsewhere
- GitHub: https://github.com/YanivHaliwa
- LinkedIn: https://www.linkedin.com/in/yaniv-haliwa
- TryHackMe: https://tryhackme.com/r/p/YanivHaliwa