Ahmed J.

I’m an OSCP-certified Offensive Security professional and Application Security Engineer with hands-on experience securing financial and regulated environments. I perform deep security assessments across web applications, APIs, mobile apps, and enterprise infrastructure. My focus is on real-world attack scenarios, the same techniques used by modern attackers, to help organizations prevent breaches before they happen. 🚀 What I Specialize In ✅ Web Application Penetration Testing OWASP Top 10 & OWASP ASVS Authentication & authorization bypass Business logic flaws Broken access control & privilege abuse ✅ API & Mobile Security Testing OWASP API Top 10 (BOLA, Mass Assignment, Rate Limiting, etc.) Secure API design & abuse testing Android & iOS application security Token misuse, logic flaws, sensitive data exposure ✅ Application Security Assessments Secure source code review Threat modeling & attack surface analysis Pre-production & post-deployment security reviews ✅ Network & Active Directory Penetration Testing Internal & external network testing Active Directory exploitation (Kerberoasting, Delegation abuse, privilege escalation, DCSync) Red team–style lateral movement & post-exploitation