I'm Mohammed Eldqyqy, an offensive-security focused learner building practical skills in penetration testing, bug hunting, red teaming, and security research.

My current focus is on Web, API, Mobile, Active Directory, Network, and AI/LLM Pentest while continuously improving my programming, operating-system, networking, and exploitation skills.

My GitHub is being transitioned toward cybersecurity. Some older repositories are not security-related and were created before my current offensive-security focus.

Domain	Focus
Web Security	Web application pentesting, vulnerability research, bug bounty
API Security	REST/GraphQL API testing, authentication and authorization
Mobile Security	Android application security, dynamic/static analysis
Active Directory	Windows/AD enumeration, attacks, privilege escalation
Network Security	Network enumeration, service exploitation, traffic analysis
Red Teaming	Adversary simulation, C2, Windows tradecraft
AI/LLM Security	Prompt injection, LLM application testing, AI red teaming
Security Research	Security tooling, vulnerability research, automation

Burp Suite • Nuclei • ffuf • Gobuster • SQLMap • Postman

Nmap • Masscan • Amass • Subfinder • httpx • Wireshark • Netcat

BloodHound • Impacket • NetExec • Rubeus • Mimikatz • Responder

Metasploit • Sliver • Cobalt Strike • PowerShell • Empire

MobSF • Frida • Objection • ADB • JADX

LLM application testing • Prompt injection testing • AI red teaming • API security testing

No professional cybersecurity certifications earned yet.

Training / learning completed or studied — not presented as certifications unless officially earned.

• Security+ — CompTIA curriculum
• Network+ — CompTIA curriculum
• eJPTv2 — Hossam Shady / RedNexus Academy
• Red Teaming Diploma — Hossam Shady / RedNexus Academy
• Advanced Bug Bounty Secrets — Hossam Shady / RedNexus Academy
• CRTP Training — Hossam Shady / RedNexus Academy
• OSCP Training — Hossam Shady / RedNexus Academy
• AI Red Teaming — Hossam Shady / RedNexus Academy

Currently building practical experience through:

• Web & API security labs
• Mobile security labs
• Active Directory environments
• Network penetration testing
• Red-team tradecraft
• AI/LLM security testing

I'm building a cybersecurity-focused portfolio around practical security tools, automation, research, and write-ups.

Automated web application security testing tool for discovering, validating, and documenting Cross-Site Scripting (XSS) vulnerabilities.

The tool combines:

Automated target reconnaissance and crawling

URL parameter and HTML form discovery

Automated XSS payload testing

Dynamic JavaScript execution with Selenium

Exploitation validation

Evidence collection

Advanced attack-chain execution

Automated security assessment reporting

Tech Stack: Python • Selenium • BeautifulSoup

Local-first NextDNS monitoring utility for detecting custom denylist matches, tracking activity, and delivering actionable security alerts.

The tool combines:

Multi-profile NextDNS log monitoring with persistent API polling checkpoints

Custom denylist matching with exact, parent-domain, and wildcard support

Local SQLite persistence for profiles, monitored domains, and alert state

Telegram security alerts with cooldown and retry handling

Local web dashboard for monitoring status, detections, and statistics

Monitoring health and error tracking with persistent runtime state

Tech Stack: Python • SQLite • NextDNS API • Telegram Bot API