Abdullah Bin ZarshaidOffensive security
Ethical hacking, software development and security research, connected to the evidence a team needs to fix what matters.
AUTHORIZED · HANDS-ON · REPRODUCIBLE
My work spans web and API penetration testing, authentication and authorization, mobile and network assessment, Burp Suite extensions and practical security automation.
Building applications and tools informs how I examine access, data flow and state changes. The goal is a finding another person can reproduce, a fix an engineer can use and a retest that checks the original failure.
BUILD · TEST · RESEARCH
From mobile applications and network software to IoT security research and assessment tooling: building systems informs how I test them, choose controls and explain the evidence.
Undergraduate engineering
Built Android applications and network-discovery software during undergraduate study, including a utility for mapping networks and enumerating services.
Technical focusApplication development, programming, debugging, network protocols and service discovery.
Explore the technical foundationMaster's research
Developed a FARIDA prototype for controller-assisted routing-attack detection and mitigation in low-power IoT networks, using Contiki/Cooja. The work received the Best Thesis award.
Technical focusRouting behaviour, attack scenarios, detection logic, mitigation and experimental evaluation.
Discuss the researchPractitioner-built tooling
Developed Burp Suite extensions and supporting security tooling alongside hands-on web and API assessment work, bringing software development into the testing workflow.
Technical focusHTTP analysis, repeatable checks, manual validation and reviewable assessment output.
Discuss assessment toolingPRACTISE THE METHOD
Original browser tools and public resources, built for learning and practical preparation.
Generate positive and negative cases from an explicit sample policy. Export a working test plan.
Build the matrixChange roles, ownership and tenant relationships in the full synthetic authorization lab.
Open the modelPrepare assets, exclusions, rules of engagement and a manual assessment checklist.
Open the planner