Ashraf Mohamed

01.

About Me

I’m a cybersecurity researcher and penetration tester specializing in network, web application, IoT, and hardware security assessments. With OSCP and OSCP+ certifications, I have proven hands-on ability to identify and exploit vulnerabilities in realistic environments — from Active Directory networks to embedded IoT systems. What sets me apart is my engineering background: I spent years building the exact types of production systems I now test — smart lockers controlled via RS485 serial protocols, vending machines connected through USB APIs, NFC/RFID access control systems, MQTT-connected Raspberry Pi agents, and payment gateways processing real transactions. This gives me something most security researchers don’t have: protocol-level knowledge of how these systems actually work, where the vulnerabilities hide, and how to exploit them.

My core focus areas are penetration testing (network, web, IoT), vulnerability research, privilege escalation, Active Directory exploitation, and hardware hacking. I understand the full attack surface of connected systems: from the mobile app layer (Flutter, REST APIs) through the backend (MQTT brokers, WebSockets, databases) down to the hardware layer (RS485 serial buses, NFC/RFID readers, embedded Linux on Raspberry Pi). I write custom scripts and tools to automate reconnaissance, enumeration, and exploitation workflows.

Based in Riyadh, Saudi Arabia. B.Sc. in Software Engineering from Sudan University of Science and Technology (GPA 3.08/4.0). OSCP & OSCP+ certified penetration tester. IEEE SUSTech Vice-Leader. Built and security-tested 10+ production systems serving 50,000+ users — from ride-hailing apps to automated pharmacy kiosks integrated with Saudi Arabia's national Wasfaty e-Prescribing platform.

What I Do

Personal Info

Certified in advanced offensive security techniques with hands-on expertise in penetration testing and web application security.

OffSec Certified Professional+ (OSCP+)

Issued: March 2026

Demonstrates advanced ability to identify vulnerabilities and execute organized attacks under tight time constraints. Validates skills in information gathering, exploit development, privilege escalation, client-side attacks, web application exploitation, tunneling, and Active Directory attacks.

Privilege EscalationWeb App AttacksBuffer OverflowsActive DirectoryAntivirus EvasionTunneling & PivotingBash ScriptingExploit FixingClient-Side AttacksPowerShell Empire

Verify Certificate

OffSec Certified Professional (OSCP)

Issued: March 2026

Demonstrates proficiency in ethical hacking through a challenging hands-on exam requiring successful compromise of multiple systems. Validates practical skills in network vulnerability scanning, buffer overflow exploits, web exploitation, password attacks, pivoting, and Active Directory attacks.

Network ScanningBuffer OverflowsWeb ExploitationPassword AttacksPivotingActive DirectoryMetasploitPrivilege EscalationPublic Exploit FixingFile Transfers

Verify Certificate

03.

Skills & Technologies

Security tools, IoT hacking techniques, and software engineering skills — built from years of hands-on system development and offensive security research.

Feel free to reach out for collaborations or opportunities.