An open technical archive containing software experiments, network forensics tools, CTF competition write-ups, and security research notes.
I am a Junior Penetration Tester, CTF player, and independent security builder based in Tunisia (@MouhibMahadbi / @mouhibmh / @mouhib02).
This space serves as a personal laboratory notebook to document working security utilities, network forensics experiments, and CTF challenge notes as I build software.
My focus spans practical offensive security assessments, PCAP packet inspection, metadata privacy utilities, and application security prompt kits.
All code and security tooling linked below are open-source and maintained on GitHub.
→ analyzing web application attack vectors, enumeration, and exploit techniques
→ testing local root vectors, SUID misconfigurations, and kernel space isolation
→ experimenting with raw packet parsing, frame extraction, and network attack surfaces
→ building tools around metadata reduction, EXIF stripping, and digital footprints
→ structuring prompt security frameworks and automated repository vulnerability scanners
→ testing encryption primitives, key exchange mechanics, and verification flows
Production luxury real estate web application and boutique property advisory portal for Perfect Home Real Estate in Bahrain, featuring video showcases, RERA license verification, interactive property catalog filters, inquiry modals, and automated WhatsApp integration.
Production responsive web application and digital restaurant portal for Fratello Fast Food in Hammamet, featuring high-performance 60 FPS interactions, custom food media showcase, and automated WhatsApp ordering integration.
Security utility for inspecting, analyzing, and removing hidden EXIF and sensitive metadata from files.
Lightweight static analysis scanner for detecting secrets, key leaks, and misconfigurations in codebases.
Curated repository of application security prompts, threat modeling templates, and code audit guides for LLMs.
Forensic network tool that extracts raw JPEG payloads from packet captures and renders them sequentially into video files.
Command-line tool converting raw video streams and frames into custom ASCII art renders in real time.
You take a photo of your coffee, your workspace, your house, or a trip. You see only the image. A collection of pixels representing a moment, but behind it lies hidden metadata.
Read on Medium →
A defensive walkthrough of suspicious traffic patterns, timelines, and the questions I would ask during forensic network analysis.
Read on Medium →
The word vulnerability is used daily in cybersecurity. We repeat it constantly, often with confidence, but rarely with reflection on root causes.
Read on Medium →
TryHackMe
Hands-on CTF challenges and pentesting labs covering web application vulnerabilities, network exploitation, and privilege escalation.
Hack The Box
Active machine exploitation, enumeration, and privilege escalation challenges on Hack The Box platform.
Direct verified links to code repositories, CTF research notes, and active laboratory profiles.
