Mohamed Aziz Rahmouni

Blue team operations, digital forensics and incident response (DFIR).

• Work on threat detection, digital forensic investigations, incident response, and mitigation.
• Design an AI solution to support threat detection, DFIR workflows, and mitigation.

Offensive security for enterprise clients, from reconnaissance to exploitation to evidence-backed reporting.

• Active Directory: mapped attack paths across enterprise forests, Kerberoasting, AS-REP roasting, constrained and Resource-Based delegation abuse, ACL and GPO exploitation, silver and golden ticket scenarios, and lateral movement chains (WinRM, PsExec, RDP hops) up to domain dominance.
• Web applications: assessed APIs and web apps against the OWASP Top 10, SQLi/NoSQLi, XSS, CSRF, SSRF, IDOR and broken access control, JWT flaws, insecure deserialization, upload validation bypasses, and logic flaws in auth and checkout flows.
• Validated impact with proof-of-concept exploitation, then translated findings into prioritized, client-ready reports with reproduction steps and hardening guidance.

Teaching and building the community, one artifact at a time.

• Contributed to Cybersphere, Tunisia's largest cybersecurity congress, and the ICO 2026 International Cybersecurity Olympiad program.
• Helped run flagship national CTFs like Darkest Hour and hands-on learning events like CyberCamp across the country.
• Designed and operated containerized challenge infrastructure sustaining 100% uptime for 400+ participants per event.
• Delivered hands-on secure-coding and binary exploitation workshops to students from 10+ universities.
• Authored exploitation and reverse engineering challenges modeling real-world memory-safety and logic flaws.
• Led the digital forensics track, workshops, CTF authoring, and everything in between.

Competitive team play and challenge authoring, podiums, international finals, and everything in between.

• Full-spectrum CTF play across jeopardy and attack/defense formats, binary exploitation, web, forensics, reverse engineering, and crypto.
• Authoring original challenges for regional and national competitions, from chained web exploits to live forensics stations.
• Team lab culture, shared attack notes, internal trainings, and weaponized tooling that everyone deploys.
• Flying the FL1TZ flag at international finals, CSAW CTF and CSAW Hack My Robot (NYU Abu Dhabi, UAE), Black Hat MEA, ASCWG (Egypt), and the Tech Olympics (Iran).

ICT engineering program covering computer networks, operating systems and kernel-level internals, distributed systems, software and systems engineering, embedded systems, and information systems security, the full stack between the silicon and the network edge.