Syed Muhammad Siddiq Bin Syed Ali

A cybersecurity graduate with hands-on experience in blue team operations during my National Service (2021-2023). Gained exposure to SOC operations and incident response, and eager to further enhance my knowledge and expertise in cybersecurity. Committed to continuous learning and contributing to a secure and resilient digital environment.

• Place of Birth: Singapore
• Ethnicity: Arab
• Date of Birth: 11/04/99
• Gender: Male
• Nationality: Singaporean

1. Security Master Plan for an SME scenario (Sep 2024 - Nov 2024)

• Conducted comprehensive risk assessments and threat analyses across technical, physical, and human resource assets to identify potential vulnerabilities.
• Designed mitigation strategies including the implementation of SIEM (Security Information and Event Management) and the enforcement of RBAC (Role-Based Access Control) to enhance security posture.
• Proposed a phased implementation timeline in alignment with ISO/IEC 27001 standards to ensure systematic and structured deployment of security measures.
• Delivered a cost-benefit analysis to substantiate the proposed investments in cybersecurity enhancements, emphasizing long-term organizational value and risk reduction.

2. CVE-2022-44877 (CWP Remote Arbitrary Command Execution) Detection, Alert, and Mitigation (May 2024 - Aug 2024)

• Configured Burp Suite on Kali Linux to effectively exploit the vulnerability within the Control Web Panel installed in a target machine, CentOS 7.
• Utilized Splunk Enterprise on Ubuntu Linux to detect CVE-2022-44877 exploit attempts, implementing SMS and email notifications for timely alerts.
• Implemented necessary sudo commands such as the 'firewalld' solution on the target machine to mitigate the vulnerability.
• Documented demonstration setups, installations, configurations, and limitations for future replication.

3.  CVE-2023-22809 (Unauthorized Privilege Escalation via sudoedit) Exploit (Feb 2024 - Apr 2024)

• Utilized affected Ubuntu 22.04.1 LTS to proceed with the exploit.
• Create a standard user account with no admin privileges to show proof of concept.
• Execute a bash command on a downloaded GitHub script to exploit the vulnerable '' handles in the sudoedit functionality.
• Gained access to sudoers file to forcefully alter and escalate privileges to ALL.
• Successfully gain temporary root access once exploit is complete.
• Documented demonstration setups, installations, configuration, and prevention strategies for future replication.

• 2023, Performance Recognition Award 2023 for Full-Time National Servicemen in MHQ
• 2017, Edusave Good Progress Award, ITE College East (Simei)
• 2012, Edusave Certificate of Academic Achievement, Changkat Changi Secondary School

Professional Certifications: None