Mustafa A.
Baghdad, Iraq · Senior Web Application Penetration Tester • Offensive Security Consultant · OTech
About
Offensive security specialist with over 3 years of experience and 300+ assessments across web applications, APIs, and Android mobile platforms. Expert in uncovering high-impact authorization and business-logic flaws, with a track record of identifying vulnerabilities exposing over 140 million records for tier-1 regional operators.
Skills
- Web Application Security
- IDOR
- RCE
- Authentication Bypass
- Business Logic Flaws
- JWT Attacks
- Race Conditions
- WebSocket Abuse
- SQL Injection
- File Upload Exploitation
29 skills in total
Experience
-
Senior Penetration Tester
OTech
Oct 2025 — Present
Remote
-
Independent Penetration Tester
Consultancy Partnerships
Jan 2022 — Oct 2025
Iraq/Remote