Mohammed Mahmoud Suwailih

Hi, I'm Mohammed Mahmoud, a cybersecurity researcher specializing in penetration testing and evaluating the security of web applications and APIs.
I have hands-on experience in: • OWASP Top 10 vulnerability detection (XSS, SQL Injection, CSRF, SSRF)
• Analyze access control issues (IDOR, Access Control Issues)
• Business Logic Testing
• Infrastructure and server assessment
Services I offer: • Comprehensive manual penetration testing for web applications and APIs
• Security assessment of the infrastructure within an authorized scope
• Professional reporting including severity rating and treatment recommendations
• Improved server security settings
I use professional tools such as: Burp Suite – FFUF – Nikto
I automate the scans using Python and Bash.
I am fully committed to operating within a strict legal and ethical framework and under NDA agreements when needed.