Who Am I?
Hello, I’m Abdulrahman M. Fathi
Cyber Security Engineer | Penetration Tester | Security Instructor
Based in Cairo, Egypt.
My journey in cybersecurity started with a simple question: “How do systems actually work, and how can they be broken or protected?”
What began as curiosity quickly grew into a deep passion and eventually a full-time career in offensive security. Today, I help organizations strengthen their defenses by thinking like an attacker.
Current Role
I work as a Penetration Tester in the FinTech sector, where I perform in-depth security assessments on:
- Web Applications
- Mobile Applications (Android & iOS)
- APIs & Backend Systems
- Networks & Infrastructure
- Active Directory Environments
My goal is not just to find vulnerabilities, but to deliver clear, practical, and actionable recommendations that genuinely improve security posture.
Core Expertise
- Web Application Security (OWASP Top 10)
- API Security Testing
- Mobile Application Security (Android)
- Network Penetration Testing
- Active Directory Attacks & Defense
- Secure Code Review
- Vulnerability Research & Exploit Development
- Linux & Windows Privilege Escalation
- Security Automation & Tooling (Python)
- Red Teaming
I have extensive hands-on experience with modern vulnerabilities including XSS, SSRF, IDOR, SSTI, RCE, Business Logic Flaws, Authentication/Authorization issues, and more.
On the mobile side, I specialize in Android app security — reverse engineering, bypassing protections (SSL Pinning, Root Detection, etc.), and dynamic analysis using Frida, Objection, and Medusa.
Beyond Technical Work
I’m deeply passionate about cybersecurity education and community growth. I enjoy mentoring aspiring security professionals, creating hands-on labs, and breaking down complex topics into practical, easy-to-understand content.
Whether through training, CTFs, write-ups, or one-on-one mentoring — seeing others level up is one of the most rewarding parts of what I do.
Why This Blog Exists
This blog is my personal space on the internet — a living knowledge base where I document my journey, share what I learn, and give back to the community that helped me grow.
Here you will find:
- Real-world penetration testing write-ups
- Mobile and web security research
- CTF solutions
- Security tools and automation scripts
- Career insights and lessons learned from the field
This is not just a portfolio. It’s a growing archive of knowledge, experiments, and experiences in cybersecurity.
Let’s Connect
Have a question, suggestion, or just want to say hi?
Thank you for visiting.
Whether you’re just starting your journey or already deep in the field, I hope you find something valuable here.
Abdulrahman M. Fathi
Last updated: June 2026