Mahdi Alemi

Over the past four years, I've specialized in penetration testing with a strong focus on web application security. I'm proficient in exploiting OWASP vulnerabilities and have hands-on experience in web and system/server testing. While my network penetration testing experience is limited, I have a solid understanding of CCNA concepts and Linux (up to LPIC-1 level).

I’ve ranked in the top 3% on TryHackMe, actively participate in CTFs, and contribute to the security community through bug bounties and CVE-based exploit development (PoCs on GitHub). I also lead penetration testing efforts and produce educational content, including a book titled Exploitology: Web Apps Exploits on Leanpub.

I'm continuously expanding my skills, especially in cloud security (AWS, Azure, GCP), and exploring advanced attack strategies in web and network environments.