Penetration testing
Web application and network assessments, from reconnaissance to a clear report that someone else can reproduce.
Offensive security researcher
Badr Azeez
بدر عزيز
I'm Badr Azeez, an ethical hacker, penetration tester and bug hunter from Iraq. I test web applications and networks to find what can be exploited before attackers do, compete in CTFs with my team SCS0x00, and build backends in Python with Django and FastAPI.
What I work on
Bug hunting
Finding vulnerabilities in real-world web applications and reporting them responsibly.
CTF
Competing with team SCS0x00 and solving Hack The Box machines as badrazeez.
Backend development
APIs and services in Python with Django and FastAPI, written with an attacker's eye.
Competitions
First place, cybersecurity competition of the Iraqi Ministry of Interior
Organized by the Cybersecurity Directorate, with more than 600 participants from across Iraq.
Web Security CTF – CyberTalents
Ranked 11th of 207 participants from 35+ countries | Solved all challenges
First place, Iraq National Cybersecurity CTF
Leader of the team that finished first with 375 points.
Skills
Offensive security
- Penetration testing
- Web application security
- Vulnerability assessment
- Bug bounty
- OWASP Top 10
Tools
- Burp Suite
- OWASP ZAP
- Nmap
- Wireshark
- Metasploit
Backend development
- Python
- Django
- FastAPI
- Flask
- REST APIs
- SQL
- Git
- Docker
Linux
- Linux
- Bash
- Ubuntu
- CentOS
Certifications
Courses and certificates in security, Python and IT, each with a link to verify it.
- Verify on Coursera
Meta Back-End Developer Specialization
Nine courses of hands-on training for professional back-end work, including Python and Git.
- Verify on Coursera
Google IT Support Specialization
Network setup and management, hardware maintenance and software support.
- Verify on Coursera
Crash Course on Python
Python fundamentals: variables, data types, control flow, functions and basic data structures.
- Verify on Coursera
OWASP Top 10 – 2021 Specialization
The OWASP Top 10 risks, including broken access control, cryptographic failures and injection.
- Verify on Coursera
Linux for Developers
Using Linux tools, programming languages and frameworks to build and deploy software.
- Verify on Credly
Introduction to Cybersecurity Tools & Cyber Attacks
Tools and techniques for detecting and preventing attacks: network security, encryption, malware analysis and incident response.
Contact
Questions about a penetration test, a vulnerability report, a CTF or a backend project? Reach me on any of these.